Extracting prog: 11m48.348081812s Minimizing prog: 18m43.740941082s Simplifying prog options: 0s Extracting C: 1m7.226726396s Simplifying C: 8m38.995981838s extracting reproducer from 42 programs testing a last program of every proc single: executing 7 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-sched_setattr-openat$ttyS3-socket$inet6_icmp_raw-ioctl$sock_SIOCGIFINDEX-add_key$user-add_key$user-add_key$user-keyctl$dh_compute-keyctl$dh_compute-socket-pipe-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-ioctl$KVM_SET_USER_MEMORY_REGION-socket$nl_generic-syz_genetlink_get_family_id$tipc-socket$nl_generic-set_mempolicy-bpf$MAP_CREATE-syz_open_dev$evdev-syz_genetlink_get_family_id$tipc2-setsockopt$SO_ATTACH_FILTER-sendmsg$TIPC_NL_BEARER_ENABLE-sendmsg$TIPC_NL_KEY_SET detailed listing: executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x7f, 0x5, 0x101, 0x1, 0x7, '\x00', 0x0, r5, 0x3, 0x1, 0x1, 0x2}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x88, r8, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4a9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$inet-syz_open_dev$dvb_frontend-syz_usb_connect-syz_open_dev$char_usb-timer_create-socket-setsockopt$packet_tx_ring-listen-socket-setsockopt$packet_tx_ring-sendmsg$tipc-dup3-dup-pwrite64-read-timer_settime-syz_clone-ioctl$FE_SET_PROPERTY-syz_usb_connect$cdc_ecm-openat$ubi_ctrl-openat$iommufd-ioctl$EVIOCGKEYCODE-ioctl$IOMMU_IOAS_ALLOC-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS-ioctl$sock_TIOCOUTQ detailed listing: executing program 0: r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) listen(r4, 0x0) r5 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x810}, 0x40801) r6 = dup3(r2, 0xffffffffffffffff, 0x80000) r7 = dup(r6) pwrite64(r2, &(0x7f0000000040)="46f4b58982ede3e19e", 0x9, 0x4) read(r7, &(0x7f00000014c0)=""/4096, 0x1000) timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone(0x8000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=[{0x11, '\x00', @data=0xb, 0x9}]}) syz_usb_connect$cdc_ecm(0x3, 0x4d, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000000280)=""/84) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000000)={0x48}) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-sched_setaffinity-getpid-sched_setscheduler-socketpair$unix-connect$unix-recvmmsg-bpf$PROG_LOAD-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newsa={0x19c, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@policy={0xac, 0x7, {{@in6=@private2, @in6=@empty, 0x4e24, 0x6, 0x4e22, 0x4, 0xa, 0x20, 0x20, 0x67}, {0x3, 0x4a, 0x7191, 0xc61f, 0x3, 0x975, 0x8, 0x82df}, {0x7fffffff, 0xfffffffffffffffb, 0x5, 0x9}, 0x101, 0x6e6bb5, 0x1, 0x0, 0x2, 0x2}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8801}, 0x48000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[], 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$printer-read$char_usb detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class single: successfully extracted reproducer found reproducer with 12 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$printer detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$hid detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid-syz_usb_control_io$hid detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect-syz_usb_connect$hid detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect-syz_usb_disconnect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_disconnect(r0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x24, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true reproducing took 44m45.471157583s repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff8881146d9a60 (size 8): comm "kworker/1:4", pid 5709, jiffies 4294944128 hex dump (first 8 bytes): 80 1c 3c 11 81 88 ff ff ..<..... backtrace (crc d998831d): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kvmalloc_node_noprof+0x58a/0x6f0 mm/slub.c:6933 v4l2_ctrl_handler_init_class+0x59/0x90 drivers/media/v4l2-core/v4l2-ctrls-core.c:1741 msi2500_probe+0x2f7/0x3a0 drivers/media/usb/msi2500/msi2500.c:1263 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 device_add+0x99f/0xc80 drivers/base/core.c:3772 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 usb_probe_device+0x78/0x1f0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff88810e963c00 (size 256): comm "kworker/1:4", pid 5709, jiffies 4294944128 hex dump (first 32 bytes): 58 47 c4 25 81 88 ff ff 58 47 c4 25 81 88 ff ff XG.%....XG.%.... 10 3c 96 0e 81 88 ff ff 10 3c 96 0e 81 88 ff ff .<.......<...... backtrace (crc 54e78bf7): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kvmalloc_node_noprof+0x58a/0x6f0 mm/slub.c:6933 v4l2_ctrl_new+0x2bb/0x1470 drivers/media/v4l2-core/v4l2-ctrls-core.c:2152 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2306 handler_new_ref+0x34d/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1887 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2456 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2430 msi2500_probe+0x32e/0x3a0 drivers/media/usb/msi2500/msi2500.c:1271 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 device_add+0x99f/0xc80 drivers/base/core.c:3772 BUG: memory leak unreferenced object 0xffff8881113c1dc0 (size 64): comm "kworker/1:4", pid 5709, jiffies 4294944128 hex dump (first 32 bytes): c0 1a 3c 11 81 88 ff ff 68 47 c4 25 81 88 ff ff ..<.....hG.%.... 00 00 00 00 00 00 00 00 00 3c 96 0e 81 88 ff ff .........<...... backtrace (crc 8c0d3fc3): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kmalloc_noprof+0x3bf/0x550 mm/slub.c:5387 _kmalloc_noprof include/linux/slab.h:973 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] handler_new_ref+0xd9/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1895 v4l2_ctrl_new+0x69e/0x1470 drivers/media/v4l2-core/v4l2-ctrls-core.c:2235 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2306 handler_new_ref+0x34d/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1887 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2456 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2430 msi2500_probe+0x32e/0x3a0 drivers/media/usb/msi2500/msi2500.c:1271 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 BUG: memory leak unreferenced object 0xffff8881113c1ac0 (size 64): comm "kworker/1:4", pid 5709, jiffies 4294944128 hex dump (first 32 bytes): 40 82 14 12 81 88 ff ff c0 1d 3c 11 81 88 ff ff @.........<..... c0 1d 3c 11 81 88 ff ff 00 41 30 12 81 88 ff ff ..<......A0..... backtrace (crc 4f8aef11): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kmalloc_noprof+0x3bf/0x550 mm/slub.c:5387 _kmalloc_noprof include/linux/slab.h:973 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] handler_new_ref+0xd9/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1895 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2456 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2430 msi2500_probe+0x32e/0x3a0 drivers/media/usb/msi2500/msi2500.c:1271 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 device_add+0x99f/0xc80 drivers/base/core.c:3772 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF final repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff8881146d9a60 (size 8): comm "kworker/1:4", pid 5709, jiffies 4294944128 hex dump (first 8 bytes): 80 1c 3c 11 81 88 ff ff ..<..... backtrace (crc d998831d): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kvmalloc_node_noprof+0x58a/0x6f0 mm/slub.c:6933 v4l2_ctrl_handler_init_class+0x59/0x90 drivers/media/v4l2-core/v4l2-ctrls-core.c:1741 msi2500_probe+0x2f7/0x3a0 drivers/media/usb/msi2500/msi2500.c:1263 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 device_add+0x99f/0xc80 drivers/base/core.c:3772 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 usb_probe_device+0x78/0x1f0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff88810e963c00 (size 256): comm "kworker/1:4", pid 5709, jiffies 4294944128 hex dump (first 32 bytes): 58 47 c4 25 81 88 ff ff 58 47 c4 25 81 88 ff ff XG.%....XG.%.... 10 3c 96 0e 81 88 ff ff 10 3c 96 0e 81 88 ff ff .<.......<...... backtrace (crc 54e78bf7): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kvmalloc_node_noprof+0x58a/0x6f0 mm/slub.c:6933 v4l2_ctrl_new+0x2bb/0x1470 drivers/media/v4l2-core/v4l2-ctrls-core.c:2152 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2306 handler_new_ref+0x34d/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1887 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2456 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2430 msi2500_probe+0x32e/0x3a0 drivers/media/usb/msi2500/msi2500.c:1271 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 device_add+0x99f/0xc80 drivers/base/core.c:3772 BUG: memory leak unreferenced object 0xffff8881113c1dc0 (size 64): comm "kworker/1:4", pid 5709, jiffies 4294944128 hex dump (first 32 bytes): c0 1a 3c 11 81 88 ff ff 68 47 c4 25 81 88 ff ff ..<.....hG.%.... 00 00 00 00 00 00 00 00 00 3c 96 0e 81 88 ff ff .........<...... backtrace (crc 8c0d3fc3): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kmalloc_noprof+0x3bf/0x550 mm/slub.c:5387 _kmalloc_noprof include/linux/slab.h:973 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] handler_new_ref+0xd9/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1895 v4l2_ctrl_new+0x69e/0x1470 drivers/media/v4l2-core/v4l2-ctrls-core.c:2235 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2306 handler_new_ref+0x34d/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1887 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2456 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2430 msi2500_probe+0x32e/0x3a0 drivers/media/usb/msi2500/msi2500.c:1271 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 BUG: memory leak unreferenced object 0xffff8881113c1ac0 (size 64): comm "kworker/1:4", pid 5709, jiffies 4294944128 hex dump (first 32 bytes): 40 82 14 12 81 88 ff ff c0 1d 3c 11 81 88 ff ff @.........<..... c0 1d 3c 11 81 88 ff ff 00 41 30 12 81 88 ff ff ..<......A0..... backtrace (crc 4f8aef11): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kmalloc_noprof+0x3bf/0x550 mm/slub.c:5387 _kmalloc_noprof include/linux/slab.h:973 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] handler_new_ref+0xd9/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1895 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2456 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2430 msi2500_probe+0x32e/0x3a0 drivers/media/usb/msi2500/msi2500.c:1271 usb_probe_interface+0x210/0x480 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:628 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:706 __driver_probe_device+0xe9/0x1a0 drivers/base/dd.c:868 driver_probe_device+0x28/0xf0 drivers/base/dd.c:898 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1026 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1098 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1153 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:620 device_add+0x99f/0xc80 drivers/base/core.c:3772 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF