Kernel bug: memory leak in io_submit_sqes (5)
Subsystem: io-uring
Status: fixed

Crash report:
2025/12/01 19:06:02 executed programs: 5
BUG: memory leak
unreferenced object 0xffff88812612b200 (size 248):
  comm "syz.0.17", pid 6080, jiffies 4294945075
  hex dump (first 32 bytes):
    40 12 ef 0c 81 88 ff ff 00 00 00 00 00 00 00 00  @...............
    3c 20 00 c0 00 00 00 00 00 00 00 00 00 00 00 00  < ..............
  backtrace (crc af24a25):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4983 [inline]
    kmem_cache_alloc_bulk_noprof+0x220/0x3e0 mm/slub.c:7497
    __io_alloc_req_refill+0x54/0x1a0 io_uring/io_uring.c:1058
    io_alloc_req io_uring/io_uring.h:543 [inline]
    io_submit_sqes+0x584/0xe80 io_uring/io_uring.c:2438
    __do_sys_io_uring_enter+0x83f/0xcf0 io_uring/io_uring.c:3516
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88812615b200 (size 248):
  comm "syz.0.18", pid 6082, jiffies 4294945076
  hex dump (first 32 bytes):
    40 12 ef 0c 81 88 ff ff 00 00 00 00 00 00 00 00  @...............
    3c 20 00 c0 00 00 00 00 00 00 00 00 00 00 00 00  < ..............
  backtrace (crc 4d803735):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4983 [inline]
    kmem_cache_alloc_bulk_noprof+0x220/0x3e0 mm/slub.c:7497
    __io_alloc_req_refill+0x54/0x1a0 io_uring/io_uring.c:1058
    io_alloc_req io_uring/io_uring.h:543 [inline]
    io_submit_sqes+0x584/0xe80 io_uring/io_uring.c:2438
    __do_sys_io_uring_enter+0x83f/0xcf0 io_uring/io_uring.c:3516
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff888111143d00 (size 248):
  comm "syz.0.19", pid 6085, jiffies 4294945078
  hex dump (first 32 bytes):
    40 12 ef 0c 81 88 ff ff 00 00 00 00 00 00 00 00  @...............
    3c 20 00 c0 00 00 00 00 00 00 00 00 00 00 00 00  < ..............
  backtrace (crc 3cb6e82d):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4983 [inline]
    kmem_cache_alloc_bulk_noprof+0x220/0x3e0 mm/slub.c:7497
    __io_alloc_req_refill+0x54/0x1a0 io_uring/io_uring.c:1058
    io_alloc_req io_uring/io_uring.h:543 [inline]
    io_submit_sqes+0x584/0xe80 io_uring/io_uring.c:2438
    __do_sys_io_uring_enter+0x83f/0xcf0 io_uring/io_uring.c:3516
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88810d84a400 (size 248):
  comm "syz.0.20", pid 6126, jiffies 4294945722
  hex dump (first 32 bytes):
    40 12 ef 0c 81 88 ff ff 00 00 00 00 00 00 00 00  @...............
    3c 20 00 c0 00 00 00 00 00 00 00 00 00 00 00 00  < ..............
  backtrace (crc 9def3f66):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4983 [inline]
    kmem_cache_alloc_bulk_noprof+0x220/0x3e0 mm/slub.c:7497
    __io_alloc_req_refill+0x54/0x1a0 io_uring/io_uring.c:1058
    io_alloc_req io_uring/io_uring.h:543 [inline]
    io_submit_sqes+0x584/0xe80 io_uring/io_uring.c:2438
    __do_sys_io_uring_enter+0x83f/0xcf0 io_uring/io_uring.c:3516
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88810995e500 (size 248):
  comm "syz.0.21", pid 6127, jiffies 4294945723
  hex dump (first 32 bytes):
    40 12 ef 0c 81 88 ff ff 00 00 00 00 00 00 00 00  @...............
    3c 20 00 c0 00 00 00 00 00 00 00 00 00 00 00 00  < ..............
  backtrace (crc a8791491):
    kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline]
    slab_post_alloc_hook mm/slub.c:4983 [inline]
    kmem_cache_alloc_bulk_noprof+0x220/0x3e0 mm/slub.c:7497
    __io_alloc_req_refill+0x54/0x1a0 io_uring/io_uring.c:1058
    io_alloc_req io_uring/io_uring.h:543 [inline]
    io_submit_sqes+0x584/0xe80 io_uring/io_uring.c:2438
    __do_sys_io_uring_enter+0x83f/0xcf0 io_uring/io_uring.c:3516
    do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
    do_syscall_64+0xa4/0xfa0 arch/x86/entry/syscall_64.c:94
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF