BUG: memory leak unreferenced object 0xffff888017a6cd80 (size 96): comm "syz-executor.1", pid 4094, jiffies 4294770523 (age 121.659s) hex dump (first 32 bytes): 01 00 00 00 00 01 02 ff 02 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000ef2d54e7>] __skb_ext_alloc+0x19/0x80 net/core/skbuff.c:6224 [<0000000042b404a7>] skb_ext_add+0x503/0x670 net/core/skbuff.c:6319 [<00000000588d4b9d>] skb_set_kcov_handle include/linux/skbuff.h:4622 [inline] [<00000000588d4b9d>] skb_set_kcov_handle include/linux/skbuff.h:4612 [inline] [<00000000588d4b9d>] __alloc_skb+0x3c1/0x620 net/core/skbuff.c:253 [<000000009244bb49>] __pskb_copy_fclone+0xec/0xc90 net/core/skbuff.c:1562 [<00000000a1c0979a>] __pskb_copy include/linux/skbuff.h:1158 [inline] [<00000000a1c0979a>] pskb_copy include/linux/skbuff.h:3124 [inline] [<00000000a1c0979a>] hwsim_hw_xmit+0x381/0x6b0 drivers/net/ieee802154/mac802154_hwsim.c:132 [<00000000efda74f4>] drv_xmit_async net/mac802154/driver-ops.h:16 [inline] [<00000000efda74f4>] ieee802154_tx+0x2ab/0x470 net/mac802154/tx.c:83 [<000000002f7b2481>] ieee802154_subif_start_xmit+0xbe/0xf0 net/mac802154/tx.c:132 [<000000008ac73855>] __netdev_start_xmit include/linux/netdevice.h:4776 [inline] [<000000008ac73855>] netdev_start_xmit include/linux/netdevice.h:4790 [inline] [<000000008ac73855>] xmit_one net/core/dev.c:3576 [inline] [<000000008ac73855>] dev_hard_start_xmit+0x1ba/0x800 net/core/dev.c:3592 [<000000007bd78be1>] sch_direct_xmit+0x262/0x780 net/sched/sch_generic.c:336 [<000000008042375d>] qdisc_restart net/sched/sch_generic.c:401 [inline] [<000000008042375d>] __qdisc_run+0x4b3/0x1640 net/sched/sch_generic.c:409 [<00000000e07f05d3>] qdisc_run include/net/pkt_sched.h:126 [inline] [<00000000e07f05d3>] qdisc_run include/net/pkt_sched.h:123 [inline] [<00000000e07f05d3>] __dev_xmit_skb net/core/dev.c:3768 [inline] [<00000000e07f05d3>] __dev_queue_xmit+0xd9a/0x27f0 net/core/dev.c:4122 [<00000000309ce278>] dgram_sendmsg+0x93a/0xc50 net/ieee802154/socket.c:682 [<00000000c153927a>] sock_sendmsg_nosec net/socket.c:651 [inline] [<00000000c153927a>] sock_sendmsg+0x150/0x190 net/socket.c:671 [<000000002741e4b5>] ____sys_sendmsg+0x32e/0x860 net/socket.c:2342 [<0000000090216f24>] ___sys_sendmsg+0xff/0x170 net/socket.c:2396 [<00000000dad2f4ff>] __sys_sendmmsg+0x192/0x460 net/socket.c:2486 BUG: memory leak unreferenced object 0xffff888017a6c880 (size 96): comm "syz-executor.1", pid 4121, jiffies 4294771938 (age 120.249s) hex dump (first 32 bytes): 01 00 00 00 00 01 02 ff 02 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000ef2d54e7>] __skb_ext_alloc+0x19/0x80 net/core/skbuff.c:6224 [<0000000042b404a7>] skb_ext_add+0x503/0x670 net/core/skbuff.c:6319 [<00000000588d4b9d>] skb_set_kcov_handle include/linux/skbuff.h:4622 [inline] [<00000000588d4b9d>] skb_set_kcov_handle include/linux/skbuff.h:4612 [inline] [<00000000588d4b9d>] __alloc_skb+0x3c1/0x620 net/core/skbuff.c:253 [<000000009244bb49>] __pskb_copy_fclone+0xec/0xc90 net/core/skbuff.c:1562 [<00000000a1c0979a>] __pskb_copy include/linux/skbuff.h:1158 [inline] [<00000000a1c0979a>] pskb_copy include/linux/skbuff.h:3124 [inline] [<00000000a1c0979a>] hwsim_hw_xmit+0x381/0x6b0 drivers/net/ieee802154/mac802154_hwsim.c:132 [<00000000efda74f4>] drv_xmit_async net/mac802154/driver-ops.h:16 [inline] [<00000000efda74f4>] ieee802154_tx+0x2ab/0x470 net/mac802154/tx.c:83 [<000000002f7b2481>] ieee802154_subif_start_xmit+0xbe/0xf0 net/mac802154/tx.c:132 [<000000008ac73855>] __netdev_start_xmit include/linux/netdevice.h:4776 [inline] [<000000008ac73855>] netdev_start_xmit include/linux/netdevice.h:4790 [inline] [<000000008ac73855>] xmit_one net/core/dev.c:3576 [inline] [<000000008ac73855>] dev_hard_start_xmit+0x1ba/0x800 net/core/dev.c:3592 [<000000007bd78be1>] sch_direct_xmit+0x262/0x780 net/sched/sch_generic.c:336 [<000000008042375d>] qdisc_restart net/sched/sch_generic.c:401 [inline] [<000000008042375d>] __qdisc_run+0x4b3/0x1640 net/sched/sch_generic.c:409 [<00000000e07f05d3>] qdisc_run include/net/pkt_sched.h:126 [inline] [<00000000e07f05d3>] qdisc_run include/net/pkt_sched.h:123 [inline] [<00000000e07f05d3>] __dev_xmit_skb net/core/dev.c:3768 [inline] [<00000000e07f05d3>] __dev_queue_xmit+0xd9a/0x27f0 net/core/dev.c:4122 [<00000000309ce278>] dgram_sendmsg+0x93a/0xc50 net/ieee802154/socket.c:682 [<00000000c153927a>] sock_sendmsg_nosec net/socket.c:651 [inline] [<00000000c153927a>] sock_sendmsg+0x150/0x190 net/socket.c:671 [<000000002741e4b5>] ____sys_sendmsg+0x32e/0x860 net/socket.c:2342 [<0000000090216f24>] ___sys_sendmsg+0xff/0x170 net/socket.c:2396 [<00000000dad2f4ff>] __sys_sendmmsg+0x192/0x460 net/socket.c:2486 BUG: memory leak unreferenced object 0xffff8880561b3680 (size 96): comm "softirq", pid 0, jiffies 4294870994 (age 21.245s) hex dump (first 32 bytes): 01 00 00 00 00 01 02 ff 01 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000ef2d54e7>] __skb_ext_alloc+0x19/0x80 net/core/skbuff.c:6224 [<0000000042b404a7>] skb_ext_add+0x503/0x670 net/core/skbuff.c:6319 [<00000000588d4b9d>] skb_set_kcov_handle include/linux/skbuff.h:4622 [inline] [<00000000588d4b9d>] skb_set_kcov_handle include/linux/skbuff.h:4612 [inline] [<00000000588d4b9d>] __alloc_skb+0x3c1/0x620 net/core/skbuff.c:253 [<000000004bacdb16>] skb_copy+0x12b/0x2e0 net/core/skbuff.c:1522 [<00000000750d4c52>] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb3e/0x1370 drivers/net/wireless/mac80211_hwsim.c:1495 [<00000000c92969a2>] mac80211_hwsim_tx_frame+0x152/0x1e0 drivers/net/wireless/mac80211_hwsim.c:1712 [<0000000056888c2c>] mac80211_hwsim_beacon_tx+0x49d/0x900 drivers/net/wireless/mac80211_hwsim.c:1766 [<0000000016a95fce>] __iterate_interfaces+0x1f0/0x530 net/mac80211/util.c:792 [<0000000052b1f597>] ieee80211_iterate_active_interfaces_atomic+0x72/0x180 net/mac80211/util.c:828 [<00000000442ffc43>] mac80211_hwsim_beacon+0xd5/0x1a0 drivers/net/wireless/mac80211_hwsim.c:1789 [<00000000cc2256f4>] __run_hrtimer kernel/time/hrtimer.c:1583 [inline] [<00000000cc2256f4>] __hrtimer_run_queues+0x5e8/0xb50 kernel/time/hrtimer.c:1647 [<0000000086de477a>] hrtimer_run_softirq+0x148/0x300 kernel/time/hrtimer.c:1664 [<0000000092710a1e>] __do_softirq+0x1b6/0x86a kernel/softirq.c:298 [<00000000d30b0135>] asm_call_irq_on_stack+0x12/0x20 [<00000000bfceb873>] __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline] [<00000000bfceb873>] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline] [<00000000bfceb873>] do_softirq_own_stack+0x80/0xa0 arch/x86/kernel/irq_64.c:77 [<00000000756bf841>] invoke_softirq kernel/softirq.c:393 [inline] [<00000000756bf841>] __irq_exit_rcu kernel/softirq.c:423 [inline] [<00000000756bf841>] irq_exit_rcu+0x110/0x1a0 kernel/softirq.c:435 BUG: leak checking failed