io_setup(0x42, &(0x7f0000000300)=0x0) io_submit(r7, 0x3, &(0x7f0000000f40)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000480)="86", 0x1}, 0x0, 0x0]) BUG: memory leak unreferenced object 0xffff88801d22e000 (size 96): comm "syz-executor.5", pid 4005, jiffies 4294782504 (age 18.806s) hex dump (first 32 bytes): 01 00 00 00 00 01 02 ff 06 00 00 00 00 00 00 00 ................ 02 00 00 00 00 00 00 00 40 75 74 00 00 ea ff ff ........@ut..... backtrace: [<00000000ae42eee9>] __skb_ext_alloc+0x19/0x80 net/core/skbuff.c:6224 [<00000000baa12e5f>] skb_ext_add+0x503/0x670 net/core/skbuff.c:6319 [<0000000060675421>] skb_set_kcov_handle include/linux/skbuff.h:4622 [inline] [<0000000060675421>] skb_set_kcov_handle include/linux/skbuff.h:4612 [inline] [<0000000060675421>] __alloc_skb+0x3c1/0x620 net/core/skbuff.c:253 [<00000000401148e7>] skb_copy+0x12b/0x2e0 net/core/skbuff.c:1522 [<00000000fc29ed01>] tcp_send_synack+0x5ab/0x1450 net/ipv4/tcp_output.c:3479 [<0000000019f8d26c>] tcp_rcv_synsent_state_process net/ipv4/tcp_input.c:6240 [inline] [<0000000019f8d26c>] tcp_rcv_state_process+0x2293/0x4950 net/ipv4/tcp_input.c:6354 [<00000000b1c81381>] tcp_v6_do_rcv+0x7b0/0x1290 net/ipv6/tcp_ipv6.c:1522 [<000000000a208782>] sk_backlog_rcv include/net/sock.h:1010 [inline] [<000000000a208782>] __release_sock+0x139/0x3b0 net/core/sock.c:2525 [<00000000afd54299>] release_sock+0x54/0x1b0 net/core/sock.c:3055 [<0000000052522b23>] inet_wait_for_connect net/ipv4/af_inet.c:594 [inline] [<0000000052522b23>] __inet_stream_connect+0x57e/0xd40 net/ipv4/af_inet.c:686 [<000000008c0206df>] inet_stream_connect+0x53/0xa0 net/ipv4/af_inet.c:725 [<000000005e442eba>] __sys_connect_file+0x157/0x1a0 net/socket.c:1841 [<000000008c05f769>] __sys_connect+0x161/0x190 net/socket.c:1858 [<000000002ce251f5>] __do_sys_connect net/socket.c:1868 [inline] [<000000002ce251f5>] __se_sys_connect net/socket.c:1865 [inline] [<000000002ce251f5>] __x64_sys_connect+0x6e/0xb0 net/socket.c:1865 [<00000000f25c0809>] do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 [<0000000041c9b4b4>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff88801822bd00 (size 96): comm "softirq", pid 0, jiffies 4294782530 (age 18.780s) hex dump (first 32 bytes): 01 00 00 00 00 01 02 ff 07 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000ae42eee9>] __skb_ext_alloc+0x19/0x80 net/core/skbuff.c:6224 [<00000000baa12e5f>] skb_ext_add+0x503/0x670 net/core/skbuff.c:6319 [<0000000060675421>] skb_set_kcov_handle include/linux/skbuff.h:4622 [inline] [<0000000060675421>] skb_set_kcov_handle include/linux/skbuff.h:4612 [inline] [<0000000060675421>] __alloc_skb+0x3c1/0x620 net/core/skbuff.c:253 [<00000000401148e7>] skb_copy+0x12b/0x2e0 net/core/skbuff.c:1522 [<00000000b1a27d84>] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb3e/0x1370 drivers/net/wireless/mac80211_hwsim.c:1495 [<00000000cd3e7552>] mac80211_hwsim_tx_frame+0x152/0x1e0 drivers/net/wireless/mac80211_hwsim.c:1712 [<000000005df3fd87>] mac80211_hwsim_beacon_tx+0x49d/0x900 drivers/net/wireless/mac80211_hwsim.c:1766 [<00000000e1e516e1>] __iterate_interfaces+0x1f0/0x530 net/mac80211/util.c:792 [<00000000ba241a0e>] ieee80211_iterate_active_interfaces_atomic+0x72/0x180 net/mac80211/util.c:828 [<00000000ffac8fe9>] mac80211_hwsim_beacon+0xd5/0x1a0 drivers/net/wireless/mac80211_hwsim.c:1789 [<00000000705baeb4>] __run_hrtimer kernel/time/hrtimer.c:1583 [inline] [<00000000705baeb4>] __hrtimer_run_queues+0x5e8/0xb50 kernel/time/hrtimer.c:1647 [<0000000057dbc832>] hrtimer_run_softirq+0x148/0x300 kernel/time/hrtimer.c:1664 [<000000002989c448>] __do_softirq+0x1b6/0x86a kernel/softirq.c:298 [<00000000e4265212>] asm_call_irq_on_stack+0x12/0x20 [<0000000057b87de9>] __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline] [<0000000057b87de9>] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline] [<0000000057b87de9>] do_softirq_own_stack+0x80/0xa0 arch/x86/kernel/irq_64.c:77 [<00000000128e3ff6>] invoke_softirq kernel/softirq.c:393 [inline] [<00000000128e3ff6>] __irq_exit_rcu kernel/softirq.c:423 [inline] [<00000000128e3ff6>] irq_exit_rcu+0x110/0x1a0 kernel/softirq.c:435 BUG: memory leak unreferenced object 0xffff88801822bc00 (size 96): comm "softirq", pid 0, jiffies 4294782531 (age 18.779s) hex dump (first 32 bytes): 01 00 00 00 00 01 02 ff 07 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000ae42eee9>] __skb_ext_alloc+0x19/0x80 net/core/skbuff.c:6224 [<00000000baa12e5f>] skb_ext_add+0x503/0x670 net/core/skbuff.c:6319 [<0000000060675421>] skb_set_kcov_handle include/linux/skbuff.h:4622 [inline] [<0000000060675421>] skb_set_kcov_handle include/linux/skbuff.h:4612 [inline] [<0000000060675421>] __alloc_skb+0x3c1/0x620 net/core/skbuff.c:253 [<00000000401148e7>] skb_copy+0x12b/0x2e0 net/core/skbuff.c:1522 [<00000000b1a27d84>] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb3e/0x1370 drivers/net/wireless/mac80211_hwsim.c:1495 [<00000000cd3e7552>] mac80211_hwsim_tx_frame+0x152/0x1e0 drivers/net/wireless/mac80211_hwsim.c:1712 [<000000005df3fd87>] mac80211_hwsim_beacon_tx+0x49d/0x900 drivers/net/wireless/mac80211_hwsim.c:1766 [<00000000e1e516e1>] __iterate_interfaces+0x1f0/0x530 net/mac80211/util.c:792 [<00000000ba241a0e>] ieee80211_iterate_active_interfaces_atomic+0x72/0x180 net/mac80211/util.c:828 [<00000000ffac8fe9>] mac80211_hwsim_beacon+0xd5/0x1a0 drivers/net/wireless/mac80211_hwsim.c:1789 [<00000000705baeb4>] __run_hrtimer kernel/time/hrtimer.c:1583 [inline] [<00000000705baeb4>] __hrtimer_run_queues+0x5e8/0xb50 kernel/time/hrtimer.c:1647 [<0000000057dbc832>] hrtimer_run_softirq+0x148/0x300 kernel/time/hrtimer.c:1664 [<000000002989c448>] __do_softirq+0x1b6/0x86a kernel/softirq.c:298 [<00000000e4265212>] asm_call_irq_on_stack+0x12/0x20 [<0000000057b87de9>] __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline] [<0000000057b87de9>] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline] [<0000000057b87de9>] do_softirq_own_stack+0x80/0xa0 arch/x86/kernel/irq_64.c:77 [<00000000128e3ff6>] invoke_softirq kernel/softirq.c:393 [inline] [<00000000128e3ff6>] __irq_exit_rcu kernel/softirq.c:423 [inline] [<00000000128e3ff6>] irq_exit_rcu+0x110/0x1a0 kernel/softirq.c:435 BUG: leak checking failed