BUG: memory leak
unreferenced object 0xffff888117cac800 (size 2048):
  comm "syz-executor.0", pid 7117, jiffies 4294947279 (age 68.040s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    20 00 00 00 00 01 00 00 00 00 00 00 01 00 00 00   ...............
  backtrace:
    [<000000002d33197f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000002d33197f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<000000002d33197f>] slab_alloc mm/slab.c:3320 [inline]
    [<000000002d33197f>] __do_kmalloc mm/slab.c:3654 [inline]
    [<000000002d33197f>] __kmalloc+0x169/0x300 mm/slab.c:3665
    [<00000000fd0132d0>] kmalloc include/linux/slab.h:561 [inline]
    [<00000000fd0132d0>] bio_alloc_bioset+0x1b5/0x2c0 block/bio.c:443
    [<00000000899c17d2>] bio_kmalloc include/linux/bio.h:405 [inline]
    [<00000000899c17d2>] bio_copy_user_iov+0x121/0x4d0 block/bio.c:1253
    [<000000001271cb6e>] __blk_rq_map_user_iov block/blk-map.c:73 [inline]
    [<000000001271cb6e>] blk_rq_map_user_iov+0xc6/0x2b0 block/blk-map.c:142
    [<0000000025d83e93>] blk_rq_map_user+0x71/0xb0 block/blk-map.c:172
    [<00000000dd6bdca8>] sg_start_req drivers/scsi/sg.c:1837 [inline]
    [<00000000dd6bdca8>] sg_common_write.isra.0+0x6c9/0xaf0 drivers/scsi/sg.c:807
    [<00000000fb35a816>] sg_new_write.isra.0+0x1a2/0x360 drivers/scsi/sg.c:776
    [<000000006282f3b8>] sg_write.part.0+0x41f/0x520 drivers/scsi/sg.c:640
    [<00000000b0e7617e>] sg_write+0x44/0x64 drivers/scsi/sg.c:621
    [<00000000af7e42a8>] do_loop_readv_writev fs/read_write.c:717 [inline]
    [<00000000af7e42a8>] do_loop_readv_writev fs/read_write.c:701 [inline]
    [<00000000af7e42a8>] do_iter_write fs/read_write.c:972 [inline]
    [<00000000af7e42a8>] do_iter_write+0x1da/0x230 fs/read_write.c:951
    [<00000000b9befb6b>] vfs_writev+0xcb/0x130 fs/read_write.c:1015
    [<000000001905eadd>] do_writev+0x89/0x180 fs/read_write.c:1058
    [<00000000299ca334>] __do_sys_writev fs/read_write.c:1131 [inline]
    [<00000000299ca334>] __se_sys_writev fs/read_write.c:1128 [inline]
    [<00000000299ca334>] __x64_sys_writev+0x20/0x30 fs/read_write.c:1128
    [<0000000035fdba75>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000e5f71884>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

BUG: memory leak
unreferenced object 0xffff88811b756800 (size 2048):
  comm "syz-executor.0", pid 7118, jiffies 4294947282 (age 68.010s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    20 00 00 00 00 01 00 00 00 00 00 00 01 00 00 00   ...............
  backtrace:
    [<000000002d33197f>] kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
    [<000000002d33197f>] slab_post_alloc_hook mm/slab.h:586 [inline]
    [<000000002d33197f>] slab_alloc mm/slab.c:3320 [inline]
    [<000000002d33197f>] __do_kmalloc mm/slab.c:3654 [inline]
    [<000000002d33197f>] __kmalloc+0x169/0x300 mm/slab.c:3665
    [<00000000fd0132d0>] kmalloc include/linux/slab.h:561 [inline]
    [<00000000fd0132d0>] bio_alloc_bioset+0x1b5/0x2c0 block/bio.c:443
    [<00000000899c17d2>] bio_kmalloc include/linux/bio.h:405 [inline]
    [<00000000899c17d2>] bio_copy_user_iov+0x121/0x4d0 block/bio.c:1253
    [<000000001271cb6e>] __blk_rq_map_user_iov block/blk-map.c:73 [inline]
    [<000000001271cb6e>] blk_rq_map_user_iov+0xc6/0x2b0 block/blk-map.c:142
    [<0000000025d83e93>] blk_rq_map_user+0x71/0xb0 block/blk-map.c:172
    [<00000000dd6bdca8>] sg_start_req drivers/scsi/sg.c:1837 [inline]
    [<00000000dd6bdca8>] sg_common_write.isra.0+0x6c9/0xaf0 drivers/scsi/sg.c:807
    [<00000000fb35a816>] sg_new_write.isra.0+0x1a2/0x360 drivers/scsi/sg.c:776
    [<000000006282f3b8>] sg_write.part.0+0x41f/0x520 drivers/scsi/sg.c:640
    [<00000000b0e7617e>] sg_write+0x44/0x64 drivers/scsi/sg.c:621
    [<00000000af7e42a8>] do_loop_readv_writev fs/read_write.c:717 [inline]
    [<00000000af7e42a8>] do_loop_readv_writev fs/read_write.c:701 [inline]
    [<00000000af7e42a8>] do_iter_write fs/read_write.c:972 [inline]
    [<00000000af7e42a8>] do_iter_write+0x1da/0x230 fs/read_write.c:951
    [<00000000b9befb6b>] vfs_writev+0xcb/0x130 fs/read_write.c:1015
    [<000000001905eadd>] do_writev+0x89/0x180 fs/read_write.c:1058
    [<00000000299ca334>] __do_sys_writev fs/read_write.c:1131 [inline]
    [<00000000299ca334>] __se_sys_writev fs/read_write.c:1128 [inline]
    [<00000000299ca334>] __x64_sys_writev+0x20/0x30 fs/read_write.c:1128
    [<0000000035fdba75>] do_syscall_64+0x73/0x220 arch/x86/entry/common.c:294
    [<00000000e5f71884>] entry_SYSCALL_64_after_hwframe+0x44/0xa9