BUG: memory leak unreferenced object 0xffff8881196bf200 (size 224): comm "syz-executor174", pid 6527, jiffies 4294942970 (age 18.510s) hex dump (first 32 bytes): a0 74 1c 29 81 88 ff ff a0 74 1c 29 81 88 ff ff .t.).....t.).... 00 00 5e 19 81 88 ff ff 00 00 00 00 00 00 00 00 ..^............. backtrace: [<000000000ee79d86>] __build_skb+0x1f/0x100 net/core/skbuff.c:311 [<00000000b9abd741>] __napi_alloc_skb+0xe5/0x140 net/core/skbuff.c:523 [<00000000143a5356>] napi_alloc_skb include/linux/skbuff.h:2856 [inline] [<00000000143a5356>] napi_get_frags net/core/dev.c:6053 [inline] [<00000000143a5356>] napi_get_frags+0x3a/0x70 net/core/dev.c:6048 [<00000000305f9093>] tun_napi_alloc_frags drivers/net/tun.c:1425 [inline] [<00000000305f9093>] tun_get_user+0xa43/0x1660 drivers/net/tun.c:1789 [<000000000d6aabf4>] tun_chr_write_iter+0x66/0xa0 drivers/net/tun.c:1986 [<00000000626837c6>] call_write_iter include/linux/fs.h:1882 [inline] [<00000000626837c6>] new_sync_write+0x173/0x210 fs/read_write.c:503 [<000000008b137e3e>] vfs_write+0x21d/0x280 fs/read_write.c:578 [<00000000eee352c5>] ksys_write+0x72/0x120 fs/read_write.c:631 [<000000001e1e910b>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 [<00000000c10ec032>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888127fa2b00 (size 224): comm "syz-executor174", pid 6568, jiffies 4294943515 (age 13.060s) hex dump (first 32 bytes): a0 5c 2a 1d 81 88 ff ff a0 5c 2a 1d 81 88 ff ff .\*......\*..... 00 00 5e 19 81 88 ff ff 00 00 00 00 00 00 00 00 ..^............. backtrace: [<000000000ee79d86>] __build_skb+0x1f/0x100 net/core/skbuff.c:311 [<00000000b9abd741>] __napi_alloc_skb+0xe5/0x140 net/core/skbuff.c:523 [<00000000143a5356>] napi_alloc_skb include/linux/skbuff.h:2856 [inline] [<00000000143a5356>] napi_get_frags net/core/dev.c:6053 [inline] [<00000000143a5356>] napi_get_frags+0x3a/0x70 net/core/dev.c:6048 [<00000000305f9093>] tun_napi_alloc_frags drivers/net/tun.c:1425 [inline] [<00000000305f9093>] tun_get_user+0xa43/0x1660 drivers/net/tun.c:1789 [<000000000d6aabf4>] tun_chr_write_iter+0x66/0xa0 drivers/net/tun.c:1986 [<00000000626837c6>] call_write_iter include/linux/fs.h:1882 [inline] [<00000000626837c6>] new_sync_write+0x173/0x210 fs/read_write.c:503 [<000000008b137e3e>] vfs_write+0x21d/0x280 fs/read_write.c:578 [<00000000eee352c5>] ksys_write+0x72/0x120 fs/read_write.c:631 [<000000001e1e910b>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 [<00000000c10ec032>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888127fa2d00 (size 224): comm "syz-executor174", pid 6612, jiffies 4294944066 (age 7.550s) hex dump (first 32 bytes): a0 f4 b5 1a 81 88 ff ff a0 f4 b5 1a 81 88 ff ff ................ 00 00 5e 19 81 88 ff ff 00 00 00 00 00 00 00 00 ..^............. backtrace: [<000000000ee79d86>] __build_skb+0x1f/0x100 net/core/skbuff.c:311 [<00000000b9abd741>] __napi_alloc_skb+0xe5/0x140 net/core/skbuff.c:523 [<00000000143a5356>] napi_alloc_skb include/linux/skbuff.h:2856 [inline] [<00000000143a5356>] napi_get_frags net/core/dev.c:6053 [inline] [<00000000143a5356>] napi_get_frags+0x3a/0x70 net/core/dev.c:6048 [<00000000305f9093>] tun_napi_alloc_frags drivers/net/tun.c:1425 [inline] [<00000000305f9093>] tun_get_user+0xa43/0x1660 drivers/net/tun.c:1789 [<000000000d6aabf4>] tun_chr_write_iter+0x66/0xa0 drivers/net/tun.c:1986 [<00000000626837c6>] call_write_iter include/linux/fs.h:1882 [inline] [<00000000626837c6>] new_sync_write+0x173/0x210 fs/read_write.c:503 [<000000008b137e3e>] vfs_write+0x21d/0x280 fs/read_write.c:578 [<00000000eee352c5>] ksys_write+0x72/0x120 fs/read_write.c:631 [<000000001e1e910b>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 [<00000000c10ec032>] entry_SYSCALL_64_after_hwframe+0x44/0xa9