syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4000, @fd, 0x63e, &(0x7f0000000400)=""/249, 0xf9, 0x15, 0x0, {0x0, r8}}, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x2, &(0x7f0000000040)={r6, r7+10000000}, 0x1, 0x1, 0x1, {0x0, r8}}, 0x7)
BUG: memory leak
unreferenced object 0xffff88801ec9c480 (size 96):
  comm "syz-executor.4", pid 4147, jiffies 4294772451 (age 260.476s)
  hex dump (first 32 bytes):
    01 00 00 00 00 01 02 ff 05 00 00 00 00 00 00 00  ................
    ff ff ff ff ff ff ff ff 80 68 07 86 ff ff ff ff  .........h......
  backtrace:
    [<00000000e6bb181a>] __skb_ext_alloc+0x19/0x90 net/core/skbuff.c:6225
    [<00000000d521547f>] skb_ext_add+0x508/0x670 net/core/skbuff.c:6320
    [<00000000a3d65b8d>] skb_set_kcov_handle include/linux/skbuff.h:4632 [inline]
    [<00000000a3d65b8d>] skb_set_kcov_handle include/linux/skbuff.h:4622 [inline]
    [<00000000a3d65b8d>] __alloc_skb+0x3c1/0x620 net/core/skbuff.c:253
    [<0000000021414403>] __pskb_copy_fclone+0xf8/0xca0 net/core/skbuff.c:1562
    [<00000000b9291b52>] __pskb_copy include/linux/skbuff.h:1160 [inline]
    [<00000000b9291b52>] pskb_copy include/linux/skbuff.h:3134 [inline]
    [<00000000b9291b52>] hwsim_hw_xmit+0x386/0x6b0 drivers/net/ieee802154/mac802154_hwsim.c:132
    [<0000000018381994>] drv_xmit_async net/mac802154/driver-ops.h:16 [inline]
    [<0000000018381994>] ieee802154_tx+0x2ab/0x470 net/mac802154/tx.c:83
    [<00000000f387ca1c>] ieee802154_subif_start_xmit+0xbe/0xf0 net/mac802154/tx.c:132
    [<00000000822307ec>] __netdev_start_xmit include/linux/netdevice.h:4792 [inline]
    [<00000000822307ec>] netdev_start_xmit include/linux/netdevice.h:4806 [inline]
    [<00000000822307ec>] xmit_one net/core/dev.c:3588 [inline]
    [<00000000822307ec>] dev_hard_start_xmit+0x1cb/0x840 net/core/dev.c:3604
    [<0000000085041b98>] sch_direct_xmit+0x25f/0x790 net/sched/sch_generic.c:336
    [<000000008242613d>] qdisc_restart net/sched/sch_generic.c:401 [inline]
    [<000000008242613d>] __qdisc_run+0x4aa/0x1610 net/sched/sch_generic.c:409
    [<0000000056093b64>] qdisc_run include/net/pkt_sched.h:127 [inline]
    [<0000000056093b64>] qdisc_run include/net/pkt_sched.h:124 [inline]
    [<0000000056093b64>] __dev_xmit_skb net/core/dev.c:3780 [inline]
    [<0000000056093b64>] __dev_queue_xmit+0xd99/0x2730 net/core/dev.c:4136
    [<000000009ca3d4f6>] dgram_sendmsg+0xad4/0xdf0 net/ieee802154/socket.c:692
    [<000000003e141ed8>] sock_sendmsg_nosec net/socket.c:651 [inline]
    [<000000003e141ed8>] sock_sendmsg+0x154/0x190 net/socket.c:671
    [<00000000b815e4fe>] ____sys_sendmsg+0x334/0x870 net/socket.c:2342
    [<000000005f1bfa13>] ___sys_sendmsg+0xf3/0x170 net/socket.c:2396
    [<000000000cbfe0e8>] __sys_sendmmsg+0x195/0x470 net/socket.c:2486

BUG: leak checking failed