executing program executing program BUG: memory leak unreferenced object 0xffff888119b03a00 (size 224): comm "syz-executor623", pid 6473, jiffies 4294943471 (age 13.190s) hex dump (first 32 bytes): a0 64 48 1c 81 88 ff ff a0 64 48 1c 81 88 ff ff .dH......dH..... 00 c0 ce 16 81 88 ff ff 00 00 00 00 00 00 00 00 ................ backtrace: [<0000000089f0015a>] __build_skb+0x1f/0x100 net/core/skbuff.c:311 [<00000000bf34021e>] __napi_alloc_skb+0xe5/0x140 net/core/skbuff.c:523 [<000000008fa54912>] napi_alloc_skb include/linux/skbuff.h:2865 [inline] [<000000008fa54912>] napi_get_frags net/core/dev.c:6053 [inline] [<000000008fa54912>] napi_get_frags+0x3a/0x70 net/core/dev.c:6048 [<00000000879e128a>] tun_napi_alloc_frags drivers/net/tun.c:1425 [inline] [<00000000879e128a>] tun_get_user+0xa43/0x1660 drivers/net/tun.c:1789 [<000000004d5378a4>] tun_chr_write_iter+0x66/0xa0 drivers/net/tun.c:1986 [<000000003f02ff48>] call_write_iter include/linux/fs.h:1882 [inline] [<000000003f02ff48>] new_sync_write+0x173/0x210 fs/read_write.c:503 [<00000000c3437217>] __kernel_write+0x140/0x1f0 fs/read_write.c:530 [<00000000f1d65b10>] write_pipe_buf+0x61/0x80 fs/splice.c:799 [<0000000002db4dd9>] splice_from_pipe_feed fs/splice.c:502 [inline] [<0000000002db4dd9>] __splice_from_pipe+0x154/0x290 fs/splice.c:626 [<0000000093831285>] splice_from_pipe fs/splice.c:661 [inline] [<0000000093831285>] default_file_splice_write fs/splice.c:811 [inline] [<0000000093831285>] do_splice_from fs/splice.c:847 [inline] [<0000000093831285>] do_splice+0x772/0x8d0 fs/splice.c:1144 [<00000000ac0af729>] __do_sys_splice fs/splice.c:1419 [inline] [<00000000ac0af729>] __se_sys_splice fs/splice.c:1401 [inline] [<00000000ac0af729>] __x64_sys_splice+0xaa/0x110 fs/splice.c:1401 [<00000000813a2f8f>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 [<00000000554a2968>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888119ac4d00 (size 224): comm "syz-executor623", pid 6519, jiffies 4294944022 (age 7.680s) hex dump (first 32 bytes): a0 fc 67 1c 81 88 ff ff a0 fc 67 1c 81 88 ff ff ..g.......g..... 00 c0 ce 16 81 88 ff ff 00 00 00 00 00 00 00 00 ................ backtrace: [<0000000089f0015a>] __build_skb+0x1f/0x100 net/core/skbuff.c:311 [<00000000bf34021e>] __napi_alloc_skb+0xe5/0x140 net/core/skbuff.c:523 [<000000008fa54912>] napi_alloc_skb include/linux/skbuff.h:2865 [inline] [<000000008fa54912>] napi_get_frags net/core/dev.c:6053 [inline] [<000000008fa54912>] napi_get_frags+0x3a/0x70 net/core/dev.c:6048 [<00000000879e128a>] tun_napi_alloc_frags drivers/net/tun.c:1425 [inline] [<00000000879e128a>] tun_get_user+0xa43/0x1660 drivers/net/tun.c:1789 [<000000004d5378a4>] tun_chr_write_iter+0x66/0xa0 drivers/net/tun.c:1986 [<000000003f02ff48>] call_write_iter include/linux/fs.h:1882 [inline] [<000000003f02ff48>] new_sync_write+0x173/0x210 fs/read_write.c:503 [<00000000c3437217>] __kernel_write+0x140/0x1f0 fs/read_write.c:530 [<00000000f1d65b10>] write_pipe_buf+0x61/0x80 fs/splice.c:799 [<0000000002db4dd9>] splice_from_pipe_feed fs/splice.c:502 [inline] [<0000000002db4dd9>] __splice_from_pipe+0x154/0x290 fs/splice.c:626 [<0000000093831285>] splice_from_pipe fs/splice.c:661 [inline] [<0000000093831285>] default_file_splice_write fs/splice.c:811 [inline] [<0000000093831285>] do_splice_from fs/splice.c:847 [inline] [<0000000093831285>] do_splice+0x772/0x8d0 fs/splice.c:1144 [<00000000ac0af729>] __do_sys_splice fs/splice.c:1419 [inline] [<00000000ac0af729>] __se_sys_splice fs/splice.c:1401 [inline] [<00000000ac0af729>] __x64_sys_splice+0xaa/0x110 fs/splice.c:1401 [<00000000813a2f8f>] do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 [<00000000554a2968>] entry_SYSCALL_64_after_hwframe+0x44/0xa9