Extracting prog: 7m36.896113428s Minimizing prog: 6m48.083330285s Simplifying prog options: 0s Extracting C: 1m26.622092626s Simplifying C: 6m40.78524251s extracting reproducer from 41 programs testing a last program of every proc single: executing 7 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-process_vm_readv-fcntl$lock-write$uinput_user_dev detailed listing: executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[{@fat=@flush}, {@uni_xlate}, {@numtail}, {@rodir}, {@fat=@flush}, {@numtail}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@dos1xfloppy}, {@rodir}, {@uni_xlate}, {@fat=@quiet}]}, 0xf5, 0x2f0, &(0x7f0000000f80)="$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") process_vm_readv(0x0, &(0x7f0000008400), 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x94ee2eb, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x2, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0xd6dd, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xfffffffb, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x80, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x80000000, 0x4, 0x0, 0x5, 0x8, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x1, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uinput-chdir-openat-creat-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-openat2-write$binfmt_elf32-execve-lseek-getdents64-socket$inet6_tcp-openat-fchown-fchmodat-ioctl$UI_SET_RELBIT detailed listing: executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x78) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat2(r1, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x200100, 0x30, 0x60}, 0x18) write$binfmt_elf32(r2, 0x0, 0x0) execve(0x0, 0x0, 0x0) lseek(r1, 0x7fffdfff, 0x2) getdents64(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r6, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xb) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect-syz_usb_control_io detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) program crashed: memory leak in v4l2_ctrl_handler_init_class single: successfully extracted reproducer found reproducer with 3 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0x86, 0xe4, 0x40, 0x1df7, 0x2500, 0x2679, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x3, 0xc, 0x8af52927e293d215, 0x5, "", [{{0x9, 0x4, 0x5, 0x6, 0x0, 0x68, 0x4, 0x13, 0xfb}}, {{0x9, 0x4, 0x6c, 0x7, 0x0, 0xdd, 0x71, 0x5a, 0x17}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true reproducing took 25m47.934361413s repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff88810b5cd758 (size 8): comm "kworker/1:3", pid 5656, jiffies 4294942812 hex dump (first 8 bytes): c0 12 51 15 81 88 ff ff ..Q..... backtrace (crc e1d080e9): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4574 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kvmalloc_node_noprof+0x537/0x760 mm/slub.c:6832 v4l2_ctrl_handler_init_class+0x59/0x90 drivers/media/v4l2-core/v4l2-ctrls-core.c:1728 msi2500_probe+0x2a9/0x390 drivers/media/usb/msi2500/msi2500.c:1248 usb_probe_interface+0x22a/0x4e0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:709 __driver_probe_device+0xe8/0x1a0 drivers/base/dd.c:871 driver_probe_device+0x2a/0x120 drivers/base/dd.c:901 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1029 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1101 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1156 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:613 device_add+0x99b/0xc70 drivers/base/core.c:3706 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 usb_probe_device+0x78/0x1f0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff88812d503200 (size 256): comm "kworker/1:3", pid 5656, jiffies 4294942812 hex dump (first 32 bytes): 58 b7 9b 14 81 88 ff ff 58 b7 9b 14 81 88 ff ff X.......X....... 10 32 50 2d 81 88 ff ff 10 32 50 2d 81 88 ff ff .2P-.....2P-.... backtrace (crc b6b976f3): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4574 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kvmalloc_node_noprof+0x537/0x760 mm/slub.c:6832 v4l2_ctrl_new+0x2bb/0x1470 drivers/media/v4l2-core/v4l2-ctrls-core.c:2139 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2293 handler_new_ref+0x34d/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1874 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2443 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2417 msi2500_probe+0x2e0/0x390 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x22a/0x4e0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:709 __driver_probe_device+0xe8/0x1a0 drivers/base/dd.c:871 driver_probe_device+0x2a/0x120 drivers/base/dd.c:901 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1029 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1101 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1156 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:613 device_add+0x99b/0xc70 drivers/base/core.c:3706 BUG: memory leak unreferenced object 0xffff88811db78c80 (size 64): comm "kworker/1:3", pid 5656, jiffies 4294942812 hex dump (first 32 bytes): c0 14 51 15 81 88 ff ff 68 b7 9b 14 81 88 ff ff ..Q.....h....... 00 00 00 00 00 00 00 00 00 32 50 2d 81 88 ff ff .........2P-.... backtrace (crc fa7b2e4d): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4574 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kmalloc_noprof+0x3b7/0x550 mm/slub.c:5307 kmalloc_noprof include/linux/slab.h:954 [inline] kzalloc_noprof include/linux/slab.h:1188 [inline] handler_new_ref+0xd9/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1882 v4l2_ctrl_new+0x69e/0x1470 drivers/media/v4l2-core/v4l2-ctrls-core.c:2222 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2293 handler_new_ref+0x34d/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1874 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2443 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2417 msi2500_probe+0x2e0/0x390 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x22a/0x4e0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:709 __driver_probe_device+0xe8/0x1a0 drivers/base/dd.c:871 driver_probe_device+0x2a/0x120 drivers/base/dd.c:901 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1029 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1101 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1156 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:613 BUG: memory leak unreferenced object 0xffff8881155114c0 (size 64): comm "kworker/1:3", pid 5656, jiffies 4294942812 hex dump (first 32 bytes): c0 19 51 15 81 88 ff ff 80 8c b7 1d 81 88 ff ff ..Q............. 80 8c b7 1d 81 88 ff ff 00 34 50 2d 81 88 ff ff .........4P-.... backtrace (crc 398a68b7): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4574 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kmalloc_noprof+0x3b7/0x550 mm/slub.c:5307 kmalloc_noprof include/linux/slab.h:954 [inline] kzalloc_noprof include/linux/slab.h:1188 [inline] handler_new_ref+0xd9/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1882 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2443 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2417 msi2500_probe+0x2e0/0x390 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x22a/0x4e0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:709 __driver_probe_device+0xe8/0x1a0 drivers/base/dd.c:871 driver_probe_device+0x2a/0x120 drivers/base/dd.c:901 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1029 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1101 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1156 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:613 device_add+0x99b/0xc70 drivers/base/core.c:3706 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF final repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff88810b5cd758 (size 8): comm "kworker/1:3", pid 5656, jiffies 4294942812 hex dump (first 8 bytes): c0 12 51 15 81 88 ff ff ..Q..... backtrace (crc e1d080e9): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4574 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kvmalloc_node_noprof+0x537/0x760 mm/slub.c:6832 v4l2_ctrl_handler_init_class+0x59/0x90 drivers/media/v4l2-core/v4l2-ctrls-core.c:1728 msi2500_probe+0x2a9/0x390 drivers/media/usb/msi2500/msi2500.c:1248 usb_probe_interface+0x22a/0x4e0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:709 __driver_probe_device+0xe8/0x1a0 drivers/base/dd.c:871 driver_probe_device+0x2a/0x120 drivers/base/dd.c:901 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1029 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1101 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1156 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:613 device_add+0x99b/0xc70 drivers/base/core.c:3706 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 usb_probe_device+0x78/0x1f0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff88812d503200 (size 256): comm "kworker/1:3", pid 5656, jiffies 4294942812 hex dump (first 32 bytes): 58 b7 9b 14 81 88 ff ff 58 b7 9b 14 81 88 ff ff X.......X....... 10 32 50 2d 81 88 ff ff 10 32 50 2d 81 88 ff ff .2P-.....2P-.... backtrace (crc b6b976f3): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4574 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kvmalloc_node_noprof+0x537/0x760 mm/slub.c:6832 v4l2_ctrl_new+0x2bb/0x1470 drivers/media/v4l2-core/v4l2-ctrls-core.c:2139 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2293 handler_new_ref+0x34d/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1874 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2443 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2417 msi2500_probe+0x2e0/0x390 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x22a/0x4e0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:709 __driver_probe_device+0xe8/0x1a0 drivers/base/dd.c:871 driver_probe_device+0x2a/0x120 drivers/base/dd.c:901 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1029 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1101 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1156 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:613 device_add+0x99b/0xc70 drivers/base/core.c:3706 BUG: memory leak unreferenced object 0xffff88811db78c80 (size 64): comm "kworker/1:3", pid 5656, jiffies 4294942812 hex dump (first 32 bytes): c0 14 51 15 81 88 ff ff 68 b7 9b 14 81 88 ff ff ..Q.....h....... 00 00 00 00 00 00 00 00 00 32 50 2d 81 88 ff ff .........2P-.... backtrace (crc fa7b2e4d): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4574 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kmalloc_noprof+0x3b7/0x550 mm/slub.c:5307 kmalloc_noprof include/linux/slab.h:954 [inline] kzalloc_noprof include/linux/slab.h:1188 [inline] handler_new_ref+0xd9/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1882 v4l2_ctrl_new+0x69e/0x1470 drivers/media/v4l2-core/v4l2-ctrls-core.c:2222 v4l2_ctrl_new_std+0x122/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2293 handler_new_ref+0x34d/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1874 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2443 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2417 msi2500_probe+0x2e0/0x390 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x22a/0x4e0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:709 __driver_probe_device+0xe8/0x1a0 drivers/base/dd.c:871 driver_probe_device+0x2a/0x120 drivers/base/dd.c:901 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1029 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1101 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1156 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:613 BUG: memory leak unreferenced object 0xffff8881155114c0 (size 64): comm "kworker/1:3", pid 5656, jiffies 4294942812 hex dump (first 32 bytes): c0 19 51 15 81 88 ff ff 80 8c b7 1d 81 88 ff ff ..Q............. 80 8c b7 1d 81 88 ff ff 00 34 50 2d 81 88 ff ff .........4P-.... backtrace (crc 398a68b7): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4574 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kmalloc_noprof+0x3b7/0x550 mm/slub.c:5307 kmalloc_noprof include/linux/slab.h:954 [inline] kzalloc_noprof include/linux/slab.h:1188 [inline] handler_new_ref+0xd9/0x440 drivers/media/v4l2-core/v4l2-ctrls-core.c:1882 v4l2_ctrl_add_handler drivers/media/v4l2-core/v4l2-ctrls-core.c:2443 [inline] v4l2_ctrl_add_handler+0x12d/0x180 drivers/media/v4l2-core/v4l2-ctrls-core.c:2417 msi2500_probe+0x2e0/0x390 drivers/media/usb/msi2500/msi2500.c:1256 usb_probe_interface+0x22a/0x4e0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:709 __driver_probe_device+0xe8/0x1a0 drivers/base/dd.c:871 driver_probe_device+0x2a/0x120 drivers/base/dd.c:901 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1029 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1101 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1156 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:613 device_add+0x99b/0xc70 drivers/base/core.c:3706 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF