pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r4, 0x0, r3, 0x0, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) BUG: memory leak unreferenced object 0xffff88804a7b4480 (size 96): comm "syz-executor.4", pid 22136, jiffies 4295003651 (age 22.268s) hex dump (first 32 bytes): 01 00 00 00 00 01 02 ff 05 00 00 00 00 00 00 00 ................ 00 23 f5 00 00 ea ff ff 40 23 f5 00 00 ea ff ff .#......@#...... backtrace: [<000000009a2b09e5>] __skb_ext_alloc+0x19/0x90 net/core/skbuff.c:6223 [<0000000087bbb8ee>] skb_ext_add+0x508/0x670 net/core/skbuff.c:6318 [<0000000009f9b67a>] skb_set_kcov_handle include/linux/skbuff.h:4630 [inline] [<0000000009f9b67a>] skb_set_kcov_handle include/linux/skbuff.h:4620 [inline] [<0000000009f9b67a>] __alloc_skb+0x3c1/0x620 net/core/skbuff.c:253 [<00000000e4328854>] skb_copy+0x137/0x2f0 net/core/skbuff.c:1522 [<0000000083674ff4>] tcp_send_synack+0x5b4/0x1450 net/ipv4/tcp_output.c:3488 [<000000007dd0c633>] tcp_rcv_synsent_state_process net/ipv4/tcp_input.c:6297 [inline] [<000000007dd0c633>] tcp_rcv_state_process+0x23d8/0x4aa0 net/ipv4/tcp_input.c:6411 [<000000003a6672b8>] tcp_v6_do_rcv+0x7b4/0x1290 net/ipv6/tcp_ipv6.c:1522 [<00000000f94dbc68>] sk_backlog_rcv include/net/sock.h:1037 [inline] [<00000000f94dbc68>] __release_sock+0x139/0x3b0 net/core/sock.c:2542 [<00000000e8716fd6>] release_sock+0x54/0x1b0 net/core/sock.c:3074 [<0000000086a5a0e2>] inet_wait_for_connect net/ipv4/af_inet.c:594 [inline] [<0000000086a5a0e2>] __inet_stream_connect+0x582/0xd50 net/ipv4/af_inet.c:686 [<00000000f174fda1>] inet_stream_connect+0x53/0xa0 net/ipv4/af_inet.c:725 [<000000005f25bb76>] __sys_connect_file+0x15b/0x1a0 net/socket.c:1841 [<00000000833b73cb>] __sys_connect+0x165/0x1a0 net/socket.c:1858 [<000000002fb04dab>] __do_sys_connect net/socket.c:1868 [inline] [<000000002fb04dab>] __se_sys_connect net/socket.c:1865 [inline] [<000000002fb04dab>] __x64_sys_connect+0x6f/0xb0 net/socket.c:1865 [<000000005c1b9176>] do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 [<000000006f2a46f1>] entry_SYSCALL_64_after_hwframe+0x61/0xc6 BUG: leak checking failed