21:54:16 executing program 2: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)=0x5) read$char_usb(0xffffffffffffffff, 0x0, 0x0) BUG: memory leak unreferenced object 0xffff88804ea18000 (size 96): comm "syz-executor.0", pid 127948, jiffies 4295302879 (age 22.172s) hex dump (first 32 bytes): 01 00 00 00 00 01 02 ff 01 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<000000006f1f8f06>] __skb_ext_alloc+0x19/0x80 net/core/skbuff.c:6224 [<00000000c590a4ce>] skb_ext_add+0x504/0x670 net/core/skbuff.c:6319 [<00000000f1980504>] skb_set_kcov_handle include/linux/skbuff.h:4622 [inline] [<00000000f1980504>] skb_set_kcov_handle include/linux/skbuff.h:4612 [inline] [<00000000f1980504>] __alloc_skb+0x3c1/0x620 net/core/skbuff.c:253 [<000000000829c0a0>] __pskb_copy_fclone+0xf8/0xca0 net/core/skbuff.c:1562 [<0000000009913598>] __pskb_copy include/linux/skbuff.h:1158 [inline] [<0000000009913598>] pskb_copy include/linux/skbuff.h:3124 [inline] [<0000000009913598>] hwsim_hw_xmit+0x382/0x6b0 drivers/net/ieee802154/mac802154_hwsim.c:132 [<000000002eecfb5d>] drv_xmit_async net/mac802154/driver-ops.h:16 [inline] [<000000002eecfb5d>] ieee802154_tx+0x2ab/0x470 net/mac802154/tx.c:83 [<0000000031e0b82b>] ieee802154_subif_start_xmit+0xbe/0xf0 net/mac802154/tx.c:132 [<0000000091f6cad3>] __netdev_start_xmit include/linux/netdevice.h:4776 [inline] [<0000000091f6cad3>] netdev_start_xmit include/linux/netdevice.h:4790 [inline] [<0000000091f6cad3>] xmit_one net/core/dev.c:3582 [inline] [<0000000091f6cad3>] dev_hard_start_xmit+0x1cb/0x840 net/core/dev.c:3598 [<00000000c9b14471>] sch_direct_xmit+0x25b/0x770 net/sched/sch_generic.c:336 [<000000005422ef82>] qdisc_restart net/sched/sch_generic.c:401 [inline] [<000000005422ef82>] __qdisc_run+0x4aa/0x1610 net/sched/sch_generic.c:409 [<00000000ffbb24e2>] qdisc_run include/net/pkt_sched.h:127 [inline] [<00000000ffbb24e2>] qdisc_run include/net/pkt_sched.h:124 [inline] [<00000000ffbb24e2>] __dev_xmit_skb net/core/dev.c:3774 [inline] [<00000000ffbb24e2>] __dev_queue_xmit+0xd95/0x27d0 net/core/dev.c:4128 [<0000000090cffda0>] dgram_sendmsg+0x937/0xc40 net/ieee802154/socket.c:682 [<000000001fa85eb2>] sock_sendmsg_nosec net/socket.c:651 [inline] [<000000001fa85eb2>] sock_sendmsg+0x150/0x190 net/socket.c:671 [<000000004adb827d>] ____sys_sendmsg+0x334/0x870 net/socket.c:2342 [<00000000c20f5e8b>] ___sys_sendmsg+0xf3/0x170 net/socket.c:2396 [<000000007db876b8>] __sys_sendmmsg+0x195/0x470 net/socket.c:2486 BUG: memory leak unreferenced object 0xffff88804af21400 (size 96): comm "syz-executor.0", pid 127948, jiffies 4295302895 (age 22.156s) hex dump (first 32 bytes): 01 00 00 00 00 01 02 ff 01 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<000000006f1f8f06>] __skb_ext_alloc+0x19/0x80 net/core/skbuff.c:6224 [<00000000c590a4ce>] skb_ext_add+0x504/0x670 net/core/skbuff.c:6319 [<00000000f1980504>] skb_set_kcov_handle include/linux/skbuff.h:4622 [inline] [<00000000f1980504>] skb_set_kcov_handle include/linux/skbuff.h:4612 [inline] [<00000000f1980504>] __alloc_skb+0x3c1/0x620 net/core/skbuff.c:253 [<000000000829c0a0>] __pskb_copy_fclone+0xf8/0xca0 net/core/skbuff.c:1562 [<0000000009913598>] __pskb_copy include/linux/skbuff.h:1158 [inline] [<0000000009913598>] pskb_copy include/linux/skbuff.h:3124 [inline] [<0000000009913598>] hwsim_hw_xmit+0x382/0x6b0 drivers/net/ieee802154/mac802154_hwsim.c:132 [<000000002eecfb5d>] drv_xmit_async net/mac802154/driver-ops.h:16 [inline] [<000000002eecfb5d>] ieee802154_tx+0x2ab/0x470 net/mac802154/tx.c:83 [<0000000031e0b82b>] ieee802154_subif_start_xmit+0xbe/0xf0 net/mac802154/tx.c:132 [<0000000091f6cad3>] __netdev_start_xmit include/linux/netdevice.h:4776 [inline] [<0000000091f6cad3>] netdev_start_xmit include/linux/netdevice.h:4790 [inline] [<0000000091f6cad3>] xmit_one net/core/dev.c:3582 [inline] [<0000000091f6cad3>] dev_hard_start_xmit+0x1cb/0x840 net/core/dev.c:3598 [<00000000c9b14471>] sch_direct_xmit+0x25b/0x770 net/sched/sch_generic.c:336 [<000000005422ef82>] qdisc_restart net/sched/sch_generic.c:401 [inline] [<000000005422ef82>] __qdisc_run+0x4aa/0x1610 net/sched/sch_generic.c:409 [<00000000ffbb24e2>] qdisc_run include/net/pkt_sched.h:127 [inline] [<00000000ffbb24e2>] qdisc_run include/net/pkt_sched.h:124 [inline] [<00000000ffbb24e2>] __dev_xmit_skb net/core/dev.c:3774 [inline] [<00000000ffbb24e2>] __dev_queue_xmit+0xd95/0x27d0 net/core/dev.c:4128 [<0000000090cffda0>] dgram_sendmsg+0x937/0xc40 net/ieee802154/socket.c:682 [<000000001fa85eb2>] sock_sendmsg_nosec net/socket.c:651 [inline] [<000000001fa85eb2>] sock_sendmsg+0x150/0x190 net/socket.c:671 [<000000004adb827d>] ____sys_sendmsg+0x334/0x870 net/socket.c:2342 [<00000000c20f5e8b>] ___sys_sendmsg+0xf3/0x170 net/socket.c:2396 [<000000007db876b8>] __sys_sendmmsg+0x195/0x470 net/socket.c:2486 BUG: memory leak unreferenced object 0xffff88804e7d1a00 (size 96): comm "syz-executor.0", pid 127948, jiffies 4295302904 (age 22.147s) hex dump (first 32 bytes): 01 00 00 00 00 01 02 ff 01 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<000000006f1f8f06>] __skb_ext_alloc+0x19/0x80 net/core/skbuff.c:6224 [<00000000c590a4ce>] skb_ext_add+0x504/0x670 net/core/skbuff.c:6319 [<00000000f1980504>] skb_set_kcov_handle include/linux/skbuff.h:4622 [inline] [<00000000f1980504>] skb_set_kcov_handle include/linux/skbuff.h:4612 [inline] [<00000000f1980504>] __alloc_skb+0x3c1/0x620 net/core/skbuff.c:253 [<000000000829c0a0>] __pskb_copy_fclone+0xf8/0xca0 net/core/skbuff.c:1562 [<0000000009913598>] __pskb_copy include/linux/skbuff.h:1158 [inline] [<0000000009913598>] pskb_copy include/linux/skbuff.h:3124 [inline] [<0000000009913598>] hwsim_hw_xmit+0x382/0x6b0 drivers/net/ieee802154/mac802154_hwsim.c:132 [<000000002eecfb5d>] drv_xmit_async net/mac802154/driver-ops.h:16 [inline] [<000000002eecfb5d>] ieee802154_tx+0x2ab/0x470 net/mac802154/tx.c:83 [<0000000031e0b82b>] ieee802154_subif_start_xmit+0xbe/0xf0 net/mac802154/tx.c:132 [<0000000091f6cad3>] __netdev_start_xmit include/linux/netdevice.h:4776 [inline] [<0000000091f6cad3>] netdev_start_xmit include/linux/netdevice.h:4790 [inline] [<0000000091f6cad3>] xmit_one net/core/dev.c:3582 [inline] [<0000000091f6cad3>] dev_hard_start_xmit+0x1cb/0x840 net/core/dev.c:3598 [<00000000c9b14471>] sch_direct_xmit+0x25b/0x770 net/sched/sch_generic.c:336 [<000000005422ef82>] qdisc_restart net/sched/sch_generic.c:401 [inline] [<000000005422ef82>] __qdisc_run+0x4aa/0x1610 net/sched/sch_generic.c:409 [<00000000ffbb24e2>] qdisc_run include/net/pkt_sched.h:127 [inline] [<00000000ffbb24e2>] qdisc_run include/net/pkt_sched.h:124 [inline] [<00000000ffbb24e2>] __dev_xmit_skb net/core/dev.c:3774 [inline] [<00000000ffbb24e2>] __dev_queue_xmit+0xd95/0x27d0 net/core/dev.c:4128 [<0000000090cffda0>] dgram_sendmsg+0x937/0xc40 net/ieee802154/socket.c:682 [<000000001fa85eb2>] sock_sendmsg_nosec net/socket.c:651 [inline] [<000000001fa85eb2>] sock_sendmsg+0x150/0x190 net/socket.c:671 [<000000004adb827d>] ____sys_sendmsg+0x334/0x870 net/socket.c:2342 [<00000000c20f5e8b>] ___sys_sendmsg+0xf3/0x170 net/socket.c:2396 [<000000007db876b8>] __sys_sendmmsg+0x195/0x470 net/socket.c:2486 BUG: leak checking failed