BUG: memory leak
unreferenced object 0xffff8881107e0400 (size 1024):
  comm "syz-executor.0", pid 5486, jiffies 4294944016 (age 14.200s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff81554bbb>] __do_kmalloc_node mm/slab_common.c:984 [inline]
    [<ffffffff81554bbb>] __kmalloc_node+0x4b/0x150 mm/slab_common.c:992
    [<ffffffff815440f9>] kmalloc_node include/linux/slab.h:602 [inline]
    [<ffffffff815440f9>] kvmalloc_node+0x99/0x170 mm/util.c:604
    [<ffffffff824c5dfe>] kvmalloc include/linux/slab.h:720 [inline]
    [<ffffffff824c5dfe>] kvmalloc_array include/linux/slab.h:738 [inline]
    [<ffffffff824c5dfe>] want_pages_array lib/iov_iter.c:985 [inline]
    [<ffffffff824c5dfe>] iov_iter_extract_user_pages lib/iov_iter.c:1765 [inline]
    [<ffffffff824c5dfe>] iov_iter_extract_pages+0x1ee/0xa40 lib/iov_iter.c:1831
    [<ffffffff82412f97>] bio_map_user_iov+0x167/0x5d0 block/blk-map.c:297
    [<ffffffff824137e3>] blk_rq_map_user_iov+0x3e3/0xb30 block/blk-map.c:664
    [<ffffffff82414333>] blk_rq_map_user block/blk-map.c:691 [inline]
    [<ffffffff82414333>] blk_rq_map_user_io+0x143/0x160 block/blk-map.c:724
    [<ffffffff82ca17f5>] sg_io+0x285/0x510 drivers/scsi/scsi_ioctl.c:456
    [<ffffffff82ca1ef5>] scsi_cdrom_send_packet+0x1b5/0x480 drivers/scsi/scsi_ioctl.c:820
    [<ffffffff82ca228a>] scsi_ioctl+0xca/0xd30 drivers/scsi/scsi_ioctl.c:903
    [<ffffffff82d36934>] sg_ioctl+0x5f4/0x10a0 drivers/scsi/sg.c:1163
    [<ffffffff8168e5f2>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff8168e5f2>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff8168e5f2>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff8168e5f2>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad3bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad3bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff8881107e2c00 (size 1024):
  comm "syz-executor.0", pid 5735, jiffies 4294944651 (age 7.850s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff81554bbb>] __do_kmalloc_node mm/slab_common.c:984 [inline]
    [<ffffffff81554bbb>] __kmalloc_node+0x4b/0x150 mm/slab_common.c:992
    [<ffffffff815440f9>] kmalloc_node include/linux/slab.h:602 [inline]
    [<ffffffff815440f9>] kvmalloc_node+0x99/0x170 mm/util.c:604
    [<ffffffff824c5dfe>] kvmalloc include/linux/slab.h:720 [inline]
    [<ffffffff824c5dfe>] kvmalloc_array include/linux/slab.h:738 [inline]
    [<ffffffff824c5dfe>] want_pages_array lib/iov_iter.c:985 [inline]
    [<ffffffff824c5dfe>] iov_iter_extract_user_pages lib/iov_iter.c:1765 [inline]
    [<ffffffff824c5dfe>] iov_iter_extract_pages+0x1ee/0xa40 lib/iov_iter.c:1831
    [<ffffffff82412f97>] bio_map_user_iov+0x167/0x5d0 block/blk-map.c:297
    [<ffffffff824137e3>] blk_rq_map_user_iov+0x3e3/0xb30 block/blk-map.c:664
    [<ffffffff82414333>] blk_rq_map_user block/blk-map.c:691 [inline]
    [<ffffffff82414333>] blk_rq_map_user_io+0x143/0x160 block/blk-map.c:724
    [<ffffffff82ca17f5>] sg_io+0x285/0x510 drivers/scsi/scsi_ioctl.c:456
    [<ffffffff82ca1ef5>] scsi_cdrom_send_packet+0x1b5/0x480 drivers/scsi/scsi_ioctl.c:820
    [<ffffffff82ca228a>] scsi_ioctl+0xca/0xd30 drivers/scsi/scsi_ioctl.c:903
    [<ffffffff82d36934>] sg_ioctl+0x5f4/0x10a0 drivers/scsi/sg.c:1163
    [<ffffffff8168e5f2>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff8168e5f2>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff8168e5f2>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff8168e5f2>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad3bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad3bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888109bd1c00 (size 1024):
  comm "syz-executor.0", pid 5737, jiffies 4294944652 (age 7.840s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff81554bbb>] __do_kmalloc_node mm/slab_common.c:984 [inline]
    [<ffffffff81554bbb>] __kmalloc_node+0x4b/0x150 mm/slab_common.c:992
    [<ffffffff815440f9>] kmalloc_node include/linux/slab.h:602 [inline]
    [<ffffffff815440f9>] kvmalloc_node+0x99/0x170 mm/util.c:604
    [<ffffffff824c5dfe>] kvmalloc include/linux/slab.h:720 [inline]
    [<ffffffff824c5dfe>] kvmalloc_array include/linux/slab.h:738 [inline]
    [<ffffffff824c5dfe>] want_pages_array lib/iov_iter.c:985 [inline]
    [<ffffffff824c5dfe>] iov_iter_extract_user_pages lib/iov_iter.c:1765 [inline]
    [<ffffffff824c5dfe>] iov_iter_extract_pages+0x1ee/0xa40 lib/iov_iter.c:1831
    [<ffffffff82412f97>] bio_map_user_iov+0x167/0x5d0 block/blk-map.c:297
    [<ffffffff824137e3>] blk_rq_map_user_iov+0x3e3/0xb30 block/blk-map.c:664
    [<ffffffff82414333>] blk_rq_map_user block/blk-map.c:691 [inline]
    [<ffffffff82414333>] blk_rq_map_user_io+0x143/0x160 block/blk-map.c:724
    [<ffffffff82ca17f5>] sg_io+0x285/0x510 drivers/scsi/scsi_ioctl.c:456
    [<ffffffff82ca1ef5>] scsi_cdrom_send_packet+0x1b5/0x480 drivers/scsi/scsi_ioctl.c:820
    [<ffffffff82ca228a>] scsi_ioctl+0xca/0xd30 drivers/scsi/scsi_ioctl.c:903
    [<ffffffff82d36934>] sg_ioctl+0x5f4/0x10a0 drivers/scsi/sg.c:1163
    [<ffffffff8168e5f2>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff8168e5f2>] __do_sys_ioctl fs/ioctl.c:870 [inline]
    [<ffffffff8168e5f2>] __se_sys_ioctl fs/ioctl.c:856 [inline]
    [<ffffffff8168e5f2>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:856
    [<ffffffff84ad3bb8>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff84ad3bb8>] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd