ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000680)={0xfffffffe, 0x6, 0x4, 0x1})
r4 = syz_open_pts(0xffffffffffffffff, 0x2000)
ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f00000006c0))
BUG: memory leak
unreferenced object 0xffff88800c580400 (size 96):
  comm "softirq", pid 0, jiffies 4294750836 (age 16.713s)
  hex dump (first 32 bytes):
    01 00 00 00 00 01 02 ff 06 00 00 00 00 00 00 00  ................
    00 45 10 00 00 ea ff ff 40 45 10 00 00 ea ff ff  .E......@E......
  backtrace:
    [<0000000072594e95>] __skb_ext_alloc+0x19/0x80 net/core/skbuff.c:6224
    [<00000000f011b5ae>] skb_ext_add+0x504/0x670 net/core/skbuff.c:6319
    [<000000004a63f564>] skb_set_kcov_handle include/linux/skbuff.h:4622 [inline]
    [<000000004a63f564>] skb_set_kcov_handle include/linux/skbuff.h:4612 [inline]
    [<000000004a63f564>] __alloc_skb+0x3c1/0x620 net/core/skbuff.c:253
    [<00000000ba3e4095>] skb_copy+0x137/0x2f0 net/core/skbuff.c:1522
    [<0000000046ba935f>] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13c0 drivers/net/wireless/mac80211_hwsim.c:1495
    [<0000000038c8dba0>] mac80211_hwsim_tx_frame+0x152/0x1e0 drivers/net/wireless/mac80211_hwsim.c:1712
    [<00000000d019388f>] mac80211_hwsim_beacon_tx+0x494/0x8f0 drivers/net/wireless/mac80211_hwsim.c:1766
    [<000000008e36056c>] __iterate_interfaces+0x1f0/0x530 net/mac80211/util.c:792
    [<00000000baa081b1>] ieee80211_iterate_active_interfaces_atomic+0x72/0x180 net/mac80211/util.c:828
    [<00000000b8bb4a64>] mac80211_hwsim_beacon+0xd5/0x1a0 drivers/net/wireless/mac80211_hwsim.c:1789
    [<000000002bf69ea2>] __run_hrtimer kernel/time/hrtimer.c:1583 [inline]
    [<000000002bf69ea2>] __hrtimer_run_queues+0x5e8/0xb50 kernel/time/hrtimer.c:1647
    [<0000000043e6c496>] hrtimer_run_softirq+0x148/0x310 kernel/time/hrtimer.c:1664
    [<00000000043b8af0>] __do_softirq+0x1b8/0x867 kernel/softirq.c:298
    [<00000000c3825f57>] asm_call_irq_on_stack+0x12/0x20
    [<00000000314e95ba>] __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
    [<00000000314e95ba>] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
    [<00000000314e95ba>] do_softirq_own_stack+0x80/0xa0 arch/x86/kernel/irq_64.c:77
    [<0000000006b2cd57>] invoke_softirq kernel/softirq.c:393 [inline]
    [<0000000006b2cd57>] __irq_exit_rcu kernel/softirq.c:423 [inline]
    [<0000000006b2cd57>] irq_exit_rcu+0x110/0x1a0 kernel/softirq.c:435

BUG: memory leak
unreferenced object 0xffff88800c580480 (size 96):
  comm "softirq", pid 0, jiffies 4294750836 (age 16.713s)
  hex dump (first 32 bytes):
    01 00 00 00 00 01 02 ff 06 00 00 00 00 00 00 00  ................
    80 56 1e 00 00 ea ff ff c0 56 1e 00 00 ea ff ff  .V.......V......
  backtrace:
    [<0000000072594e95>] __skb_ext_alloc+0x19/0x80 net/core/skbuff.c:6224
    [<00000000f011b5ae>] skb_ext_add+0x504/0x670 net/core/skbuff.c:6319
    [<000000004a63f564>] skb_set_kcov_handle include/linux/skbuff.h:4622 [inline]
    [<000000004a63f564>] skb_set_kcov_handle include/linux/skbuff.h:4612 [inline]
    [<000000004a63f564>] __alloc_skb+0x3c1/0x620 net/core/skbuff.c:253
    [<00000000ba3e4095>] skb_copy+0x137/0x2f0 net/core/skbuff.c:1522
    [<0000000046ba935f>] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13c0 drivers/net/wireless/mac80211_hwsim.c:1495
    [<0000000038c8dba0>] mac80211_hwsim_tx_frame+0x152/0x1e0 drivers/net/wireless/mac80211_hwsim.c:1712
    [<00000000d019388f>] mac80211_hwsim_beacon_tx+0x494/0x8f0 drivers/net/wireless/mac80211_hwsim.c:1766
    [<000000008e36056c>] __iterate_interfaces+0x1f0/0x530 net/mac80211/util.c:792
    [<00000000baa081b1>] ieee80211_iterate_active_interfaces_atomic+0x72/0x180 net/mac80211/util.c:828
    [<00000000b8bb4a64>] mac80211_hwsim_beacon+0xd5/0x1a0 drivers/net/wireless/mac80211_hwsim.c:1789
    [<000000002bf69ea2>] __run_hrtimer kernel/time/hrtimer.c:1583 [inline]
    [<000000002bf69ea2>] __hrtimer_run_queues+0x5e8/0xb50 kernel/time/hrtimer.c:1647
    [<0000000043e6c496>] hrtimer_run_softirq+0x148/0x310 kernel/time/hrtimer.c:1664
    [<00000000043b8af0>] __do_softirq+0x1b8/0x867 kernel/softirq.c:298
    [<00000000c3825f57>] asm_call_irq_on_stack+0x12/0x20
    [<00000000314e95ba>] __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
    [<00000000314e95ba>] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
    [<00000000314e95ba>] do_softirq_own_stack+0x80/0xa0 arch/x86/kernel/irq_64.c:77
    [<0000000006b2cd57>] invoke_softirq kernel/softirq.c:393 [inline]
    [<0000000006b2cd57>] __irq_exit_rcu kernel/softirq.c:423 [inline]
    [<0000000006b2cd57>] irq_exit_rcu+0x110/0x1a0 kernel/softirq.c:435

BUG: leak checking failed