BUG: memory leak
unreferenced object 0xffff88811ba98400 (size 1024):
  comm "syz-executor.0", pid 5479, jiffies 4294944275 (age 13.230s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8157cfde>] __do_kmalloc_node mm/slab_common.c:1006 [inline]
    [<ffffffff8157cfde>] __kmalloc_node+0x4e/0x150 mm/slab_common.c:1014
    [<ffffffff8156c6f9>] kmalloc_node include/linux/slab.h:620 [inline]
    [<ffffffff8156c6f9>] kvmalloc_node+0x99/0x170 mm/util.c:607
    [<ffffffff8250dcde>] kvmalloc include/linux/slab.h:738 [inline]
    [<ffffffff8250dcde>] kvmalloc_array include/linux/slab.h:756 [inline]
    [<ffffffff8250dcde>] want_pages_array lib/iov_iter.c:905 [inline]
    [<ffffffff8250dcde>] iov_iter_extract_user_pages lib/iov_iter.c:1614 [inline]
    [<ffffffff8250dcde>] iov_iter_extract_pages+0x60e/0xb80 lib/iov_iter.c:1680
    [<ffffffff8245c243>] bio_map_user_iov+0x163/0x5b0 block/blk-map.c:297
    [<ffffffff8245ca37>] blk_rq_map_user_iov+0x3a7/0xb60 block/blk-map.c:663
    [<ffffffff8245d5f3>] blk_rq_map_user block/blk-map.c:690 [inline]
    [<ffffffff8245d5f3>] blk_rq_map_user_io+0x143/0x160 block/blk-map.c:723
    [<ffffffff82ce9ab5>] sg_io+0x285/0x510 drivers/scsi/scsi_ioctl.c:456
    [<ffffffff82cea1b5>] scsi_cdrom_send_packet+0x1b5/0x480 drivers/scsi/scsi_ioctl.c:820
    [<ffffffff82cea54a>] scsi_ioctl+0xca/0xd30 drivers/scsi/scsi_ioctl.c:903
    [<ffffffff82d7f0b4>] sg_ioctl+0x5f4/0x10a0 drivers/scsi/sg.c:1163
    [<ffffffff816bbca2>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff816bbca2>] __do_sys_ioctl fs/ioctl.c:871 [inline]
    [<ffffffff816bbca2>] __se_sys_ioctl fs/ioctl.c:857 [inline]
    [<ffffffff816bbca2>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:857
    [<ffffffff84b4545f>] do_syscall_x64 arch/x86/entry/common.c:51 [inline]
    [<ffffffff84b4545f>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0x6b

BUG: memory leak
unreferenced object 0xffff88811ba9a400 (size 1024):
  comm "syz-executor.0", pid 5734, jiffies 4294944853 (age 7.450s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8157cfde>] __do_kmalloc_node mm/slab_common.c:1006 [inline]
    [<ffffffff8157cfde>] __kmalloc_node+0x4e/0x150 mm/slab_common.c:1014
    [<ffffffff8156c6f9>] kmalloc_node include/linux/slab.h:620 [inline]
    [<ffffffff8156c6f9>] kvmalloc_node+0x99/0x170 mm/util.c:607
    [<ffffffff8250dcde>] kvmalloc include/linux/slab.h:738 [inline]
    [<ffffffff8250dcde>] kvmalloc_array include/linux/slab.h:756 [inline]
    [<ffffffff8250dcde>] want_pages_array lib/iov_iter.c:905 [inline]
    [<ffffffff8250dcde>] iov_iter_extract_user_pages lib/iov_iter.c:1614 [inline]
    [<ffffffff8250dcde>] iov_iter_extract_pages+0x60e/0xb80 lib/iov_iter.c:1680
    [<ffffffff8245c243>] bio_map_user_iov+0x163/0x5b0 block/blk-map.c:297
    [<ffffffff8245ca37>] blk_rq_map_user_iov+0x3a7/0xb60 block/blk-map.c:663
    [<ffffffff8245d5f3>] blk_rq_map_user block/blk-map.c:690 [inline]
    [<ffffffff8245d5f3>] blk_rq_map_user_io+0x143/0x160 block/blk-map.c:723
    [<ffffffff82ce9ab5>] sg_io+0x285/0x510 drivers/scsi/scsi_ioctl.c:456
    [<ffffffff82cea1b5>] scsi_cdrom_send_packet+0x1b5/0x480 drivers/scsi/scsi_ioctl.c:820
    [<ffffffff82cea54a>] scsi_ioctl+0xca/0xd30 drivers/scsi/scsi_ioctl.c:903
    [<ffffffff82d7f0b4>] sg_ioctl+0x5f4/0x10a0 drivers/scsi/sg.c:1163
    [<ffffffff816bbca2>] vfs_ioctl fs/ioctl.c:51 [inline]
    [<ffffffff816bbca2>] __do_sys_ioctl fs/ioctl.c:871 [inline]
    [<ffffffff816bbca2>] __se_sys_ioctl fs/ioctl.c:857 [inline]
    [<ffffffff816bbca2>] __x64_sys_ioctl+0xf2/0x140 fs/ioctl.c:857
    [<ffffffff84b4545f>] do_syscall_x64 arch/x86/entry/common.c:51 [inline]
    [<ffffffff84b4545f>] do_syscall_64+0x3f/0x110 arch/x86/entry/common.c:82
    [<ffffffff84c0008b>] entry_SYSCALL_64_after_hwframe+0x63/0x6b