Extracting prog: 7m43.332964935s Minimizing prog: 8m42.033296083s Simplifying prog options: 0s Extracting C: 59.586485116s Simplifying C: 5m17.51491274s extracting reproducer from 63 programs testing a last program of every proc single: executing 13 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbmon-sendmsg$nl_route-syz_open_dev$usbfs-dup3-ioctl$MON_IOCG_STATS detailed listing: executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x5502000000000000}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VCPU-ioctl$KVM_GET_DEBUGREGS-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-syz_init_net_socket$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-socket$inet_udp-openat$binfmt_format-ioctl$TIOCSTI-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_RELOAD_REGDB-remap_file_pages-mount$9p_fd detailed listing: executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000019080)=0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) remap_file_pages(&(0x7f0000d62000/0x3000)=nil, 0x3000, 0x0, 0x1, 0x10000) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB]) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setattr-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-userfaultfd-socket$nl_netfilter-sendmsg$IPSET_CMD_ADD-ioctl$UFFDIO_REGISTER-close-openat$dsp1-ioctl$SNDCTL_DSP_CHANNELS-dup2-prlimit64-ioctl$SNDCTL_DSP_SPEED-read$FUSE detailed listing: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r4 = userfaultfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(r6, r6) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-syz_usb_connect detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x11e, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class single: successfully extracted reproducer found reproducer with 2 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x11e, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x11e, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x11e, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x11e, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: memory leak in v4l2_ctrl_handler_init_class testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x11e, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x11e, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x2, 0x11e, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0}) program crashed: memory leak in v4l2_ctrl_handler_init_class validation run: crashed=true reproducing took 25m20.563982562s repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff88810ed80758 (size 8): comm "kworker/1:3", pid 4942, jiffies 4294944993 hex dump (first 8 bytes): 80 ad 76 27 81 88 ff ff ..v'.... backtrace (crc df38a325): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4574 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kvmalloc_node_noprof+0x537/0x760 mm/slub.c:6832 v4l2_ctrl_handler_init_class+0x59/0x90 drivers/media/v4l2-core/v4l2-ctrls-core.c:1728 msi2500_probe+0x2a9/0x390 drivers/media/usb/msi2500/msi2500.c:1248 usb_probe_interface+0x22a/0x4e0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:709 __driver_probe_device+0xe8/0x1a0 drivers/base/dd.c:871 driver_probe_device+0x2a/0x120 drivers/base/dd.c:901 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1029 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1101 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1156 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:613 device_add+0x99b/0xc70 drivers/base/core.c:3706 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 usb_probe_device+0x78/0x1f0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff8881275c9480 (size 8): comm "kworker/0:0", pid 9, jiffies 4294945116 hex dump (first 8 bytes): c0 cd 0d 12 81 88 ff ff ........ backtrace (crc 7537e7d9): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4574 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kvmalloc_node_noprof+0x537/0x760 mm/slub.c:6832 v4l2_ctrl_handler_init_class+0x59/0x90 drivers/media/v4l2-core/v4l2-ctrls-core.c:1728 msi2500_probe+0x2a9/0x390 drivers/media/usb/msi2500/msi2500.c:1248 usb_probe_interface+0x22a/0x4e0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:709 __driver_probe_device+0xe8/0x1a0 drivers/base/dd.c:871 driver_probe_device+0x2a/0x120 drivers/base/dd.c:901 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1029 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1101 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1156 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:613 device_add+0x99b/0xc70 drivers/base/core.c:3706 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 usb_probe_device+0x78/0x1f0 drivers/usb/core/driver.c:291 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF final repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff88810ed80758 (size 8): comm "kworker/1:3", pid 4942, jiffies 4294944993 hex dump (first 8 bytes): 80 ad 76 27 81 88 ff ff ..v'.... backtrace (crc df38a325): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4574 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kvmalloc_node_noprof+0x537/0x760 mm/slub.c:6832 v4l2_ctrl_handler_init_class+0x59/0x90 drivers/media/v4l2-core/v4l2-ctrls-core.c:1728 msi2500_probe+0x2a9/0x390 drivers/media/usb/msi2500/msi2500.c:1248 usb_probe_interface+0x22a/0x4e0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:709 __driver_probe_device+0xe8/0x1a0 drivers/base/dd.c:871 driver_probe_device+0x2a/0x120 drivers/base/dd.c:901 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1029 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1101 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1156 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:613 device_add+0x99b/0xc70 drivers/base/core.c:3706 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 usb_probe_device+0x78/0x1f0 drivers/usb/core/driver.c:291 BUG: memory leak unreferenced object 0xffff8881275c9480 (size 8): comm "kworker/0:0", pid 9, jiffies 4294945116 hex dump (first 8 bytes): c0 cd 0d 12 81 88 ff ff ........ backtrace (crc 7537e7d9): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4574 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kvmalloc_node_noprof+0x537/0x760 mm/slub.c:6832 v4l2_ctrl_handler_init_class+0x59/0x90 drivers/media/v4l2-core/v4l2-ctrls-core.c:1728 msi2500_probe+0x2a9/0x390 drivers/media/usb/msi2500/msi2500.c:1248 usb_probe_interface+0x22a/0x4e0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:631 [inline] really_probe+0x12f/0x3a0 drivers/base/dd.c:709 __driver_probe_device+0xe8/0x1a0 drivers/base/dd.c:871 driver_probe_device+0x2a/0x120 drivers/base/dd.c:901 __device_attach_driver+0x10f/0x170 drivers/base/dd.c:1029 bus_for_each_drv+0xd2/0x130 drivers/base/bus.c:500 __device_attach+0xf9/0x290 drivers/base/dd.c:1101 device_initial_probe+0x6f/0x80 drivers/base/dd.c:1156 bus_probe_device+0x3e/0xb0 drivers/base/bus.c:613 device_add+0x99b/0xc70 drivers/base/core.c:3706 usb_set_configuration+0x8f5/0xb80 drivers/usb/core/message.c:2268 usb_generic_driver_probe+0x73/0xb0 drivers/usb/core/generic.c:250 usb_probe_device+0x78/0x1f0 drivers/usb/core/driver.c:291 connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF