BUG: memory leak
unreferenced object 0xffff88810d2e6200 (size 240):
  comm "sshd", pid 3874, jiffies 4294942037 (age 29.270s)
  hex dump (first 32 bytes):
    e0 dc 0b 0f 81 88 ff ff e0 dc 0b 0f 81 88 ff ff  ................
    00 00 c3 15 81 88 ff ff 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8388c339>] __alloc_skb+0x1f9/0x270 net/core/skbuff.c:497
    [<ffffffff83bfadaa>] alloc_skb include/linux/skbuff.h:1265 [inline]
    [<ffffffff83bfadaa>] __tcp_send_ack.part.0+0x3a/0x1d0 net/ipv4/tcp_output.c:3960
    [<ffffffff83bffc92>] __tcp_send_ack net/ipv4/tcp_output.c:3992 [inline]
    [<ffffffff83bffc92>] tcp_send_ack+0x32/0x40 net/ipv4/tcp_output.c:3992
    [<ffffffff83bd47bd>] __tcp_cleanup_rbuf+0x15d/0x1b0 net/ipv4/tcp.c:1616
    [<ffffffff83bdaf75>] tcp_recvmsg_locked+0x3c5/0xfc0 net/ipv4/tcp.c:2648
    [<ffffffff83bdccea>] tcp_recvmsg+0x9a/0x320 net/ipv4/tcp.c:2678
    [<ffffffff83c37038>] inet_recvmsg+0x78/0x180 net/ipv4/af_inet.c:850
    [<ffffffff8387b4ef>] sock_recvmsg_nosec net/socket.c:995 [inline]
    [<ffffffff8387b4ef>] sock_recvmsg net/socket.c:1013 [inline]
    [<ffffffff8387b4ef>] sock_recvmsg net/socket.c:1009 [inline]
    [<ffffffff8387b4ef>] sock_read_iter+0x15f/0x1b0 net/socket.c:1086
    [<ffffffff815e0ad1>] call_read_iter include/linux/fs.h:2181 [inline]
    [<ffffffff815e0ad1>] new_sync_read fs/read_write.c:389 [inline]
    [<ffffffff815e0ad1>] vfs_read+0x3b1/0x400 fs/read_write.c:470
    [<ffffffff815e173b>] ksys_read+0x12b/0x160 fs/read_write.c:613
    [<ffffffff846099a5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff846099a5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84800087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810d374100 (size 240):
  comm "syz-executor.0", pid 4071, jiffies 4294943533 (age 14.310s)
  hex dump (first 32 bytes):
    e0 dc 0b 0f 81 88 ff ff e0 dc 0b 0f 81 88 ff ff  ................
    00 80 f2 15 81 88 ff ff 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8388c0cb>] napi_skb_cache_get+0x6b/0x90 net/core/skbuff.c:258
    [<ffffffff8388c105>] __napi_build_skb+0x15/0x50 net/core/skbuff.c:387
    [<ffffffff8388c4d9>] __napi_alloc_skb+0x129/0x260 net/core/skbuff.c:691
    [<ffffffff8390f02c>] napi_alloc_skb include/linux/skbuff.h:3210 [inline]
    [<ffffffff8390f02c>] napi_get_frags net/core/gro.c:688 [inline]
    [<ffffffff8390f02c>] napi_get_frags+0x3c/0x80 net/core/gro.c:683
    [<ffffffff8389255b>] napi_get_frags_check+0x1b/0x50 net/core/skbuff.c:215
    [<ffffffff838bc277>] netif_napi_add_weight+0x1a7/0x350 net/core/dev.c:6388
    [<ffffffff83955973>] netif_napi_add include/linux/netdevice.h:2565 [inline]
    [<ffffffff83955973>] gro_cells_init net/core/gro_cells.c:84 [inline]
    [<ffffffff83955973>] gro_cells_init+0xa3/0x130 net/core/gro_cells.c:69
    [<ffffffff83c675a4>] ip_tunnel_init+0x124/0x2c0 net/ipv4/ip_tunnel.c:1241
    [<ffffffff838c72b4>] register_netdevice+0x184/0x990 net/core/dev.c:9983
    [<ffffffff83c67046>] __ip_tunnel_create+0x196/0x330 net/ipv4/ip_tunnel.c:267
    [<ffffffff83c68843>] ip_tunnel_init_net+0x133/0x280 net/ipv4/ip_tunnel.c:1073
    [<ffffffff838a634e>] ops_init+0x4e/0x190 net/core/net_namespace.c:134
    [<ffffffff838a6671>] setup_net+0x1e1/0x3f0 net/core/net_namespace.c:325
    [<ffffffff838a6ea0>] copy_net_ns+0x1a0/0x3e0 net/core/net_namespace.c:471
    [<ffffffff8127f0e9>] create_new_namespaces+0x199/0x4f0 kernel/nsproxy.c:110
    [<ffffffff8127fa4b>] unshare_nsproxy_namespaces+0x9b/0x120 kernel/nsproxy.c:226