kernel BUG in sg_init_one

Status: upstream: reported C repro on 2026/08/05 16:23
Reported-by: syzbot+b2c0fcf268006aa33591@syzkaller.appspotmail.com
First crash: 4d06h, last: 1h38m
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 kernel BUG in sg_init_one -1 syz, C 55 5h04m 3d20h 0/3 upstream: reported C repro on 2026/08/06 01:45
linux-6.6 kernel BUG in sg_init_one -1 syz, C 3 6d01h 12d 0/2 upstream: reported C repro on 2026/07/28 11:30
upstream kernel BUG in sg_init_one mm -1 syz, C 1032 864d 874d 25/29 fixed on 2024/05/22 23:08

Sample crash report:
------------[ cut here ]------------
kernel BUG at include/linux/scatterlist.h:163!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4535 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : sg_set_buf include/linux/scatterlist.h:163 [inline]
pc : sg_init_one+0x1b4/0x1c8 lib/scatterlist.c:141
lr : sg_set_buf include/linux/scatterlist.h:163 [inline]
lr : sg_init_one+0x1b4/0x1c8 lib/scatterlist.c:141
sp : ffff8000211a7750
x29: ffff8000211a7750 x28: ffff0000ca8ea500 x27: dfff800000000000
x26: ffff0000d6237a0e x25: ffff700004234f00 x24: 1ffff00004234f14
x23: dfff800000000000 x22: 0001000000000010 x21: 0000000000000010
x20: ffff8000211a78a0 x19: 0000000000000000 x18: 0000000000000000
x17: ffff80000a5527fc x16: ffff800011b90080 x15: ffff80000a5527fc
x14: 0000000000000003 x13: 1ffff00004234f15 x12: 0000000000000000
x11: ff0080000a910304 x10: 0000000000000000 x9 : ffff80000a910304
x8 : ffff0000c4ffd400 x7 : 0000000000000000 x6 : ffff80000805a910
x5 : 00000000ffffffff x4 : 0000000000000008 x3 : 0000000000000010
x2 : 0000000000000000 x1 : 0001000000000010 x0 : 0000600000000000
Call trace:
 sg_set_buf include/linux/scatterlist.h:163 [inline]
 sg_init_one+0x1b4/0x1c8 lib/scatterlist.c:141
 software_key_eds_op+0x410/0x938 crypto/asymmetric_keys/public_key.c:277
 asymmetric_key_eds_op+0x108/0x128 crypto/asymmetric_keys/asymmetric_type.c:596
 keyctl_pkey_e_d_s+0x1c8/0x3a0 security/keys/keyctl_pkey.c:262
 __do_sys_keyctl security/keys/keyctl.c:2009 [inline]
 __se_sys_keyctl security/keys/keyctl.c:1886 [inline]
 __arm64_sys_keyctl+0x66c/0x8e0 security/keys/keyctl.c:1886
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: aa1503e0 977f91c6 17ffffec 976e8a31 (d4210000) 
---[ end trace 0000000000000000 ]---

Crashes (148):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/05 16:48 linux-6.1.y fb28aa725e05 52aa2820 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/09 20:57 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/09 19:51 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/09 14:36 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/08 22:27 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/08 13:50 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/08 13:49 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/08 12:23 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/07 21:36 linux-6.1.y e4f7d8be268e e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/07 20:08 linux-6.1.y e4f7d8be268e e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/07 18:51 linux-6.1.y e4f7d8be268e e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/07 16:21 linux-6.1.y e4f7d8be268e e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/07 06:51 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/07 04:11 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/07 02:26 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/07 02:25 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/07 02:16 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/07 02:16 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/07 02:12 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/07 02:12 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/09 19:49 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/09 12:01 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/09 09:43 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/09 09:42 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/09 08:32 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/09 07:31 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/09 05:50 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/08 09:24 linux-6.1.y e4f7d8be268e 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/08 03:19 linux-6.1.y e4f7d8be268e e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 17:37 linux-6.1.y e4f7d8be268e e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 07:25 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 02:51 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 02:40 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 02:39 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 02:38 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 01:59 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 01:59 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 01:59 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 01:27 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 01:27 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 01:13 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 01:13 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 01:10 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 01:09 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/07 01:09 linux-6.1.y 03f3a99e8e93 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/05 16:23 linux-6.1.y fb28aa725e05 52aa2820 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
* Struck through repros no longer work on HEAD.