syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, 0x0, 0x0, 0x4) BUG: memory leak unreferenced object 0xffff8880474c7c00 (size 512): comm "syz-executor.2", pid 7033, jiffies 4296034596 (age 27.344s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<0000000055ee862c>] create_io_worker+0xf6/0x630 [<0000000090606499>] io_wqe_enqueue+0x703/0xc20 [<00000000ed571d52>] io_queue_iowq+0x22f/0x4d0 [<000000002bc3c254>] io_queue_async+0x1b2/0x430 [<00000000442887d0>] io_req_task_submit+0x1c0/0x220 [<0000000095f4f054>] io_apoll_task_func+0xc2/0x120 [<00000000c2516b90>] handle_tw_list+0xae/0x420 [<00000000ee5fdbe1>] tctx_task_work+0xc1/0x3d0 [<00000000af8502d4>] task_work_run+0xe2/0x1a0 [<000000007840e0c6>] get_signal+0x1cf/0x24b0 [<00000000b3fa32be>] arch_do_signal_or_restart+0x89/0x1be0 [<000000000ab496c6>] exit_to_user_mode_prepare+0x131/0x1a0 [<000000000c2a925f>] irqentry_exit_to_user_mode+0x5/0x30 [<000000005c599fd8>] exc_page_fault+0xc4/0x1a0 [<000000007e7e5b47>] asm_exc_page_fault+0x22/0x30 BUG: leak checking failed