kernel BUG in sg_init_one

Status: upstream: reported C repro on 2026/08/05 16:23
Reported-by: syzbot+b2c0fcf268006aa33591@syzkaller.appspotmail.com
First crash: 73d, last: 25m
▶ ▼ Bug presence (1)
Date Name Commit Repro Result
2026/08/14 upstream (ToT) a5161661ae99 C Failed due to an error; will retry later
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 kernel BUG in sg_init_one -1 syz, C 821 1h31m 73d 0/3 upstream: reported C repro on 2026/08/06 01:45
linux-6.6 kernel BUG in sg_init_one origin:lts-only -1 syz, C 4 22d 81d 0/2 upstream: reported C repro on 2026/07/28 11:30
upstream kernel BUG in sg_init_one mm -1 syz, C 1032 934d 943d 25/29 fixed on 2024/05/22 23:08

Sample crash report:
------------[ cut here ]------------
kernel BUG at include/linux/scatterlist.h:163!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4535 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : sg_set_buf include/linux/scatterlist.h:163 [inline]
pc : sg_init_one+0x1b4/0x1c8 lib/scatterlist.c:141
lr : sg_set_buf include/linux/scatterlist.h:163 [inline]
lr : sg_init_one+0x1b4/0x1c8 lib/scatterlist.c:141
sp : ffff8000211a7750
x29: ffff8000211a7750 x28: ffff0000ca8ea500 x27: dfff800000000000
x26: ffff0000d6237a0e x25: ffff700004234f00 x24: 1ffff00004234f14
x23: dfff800000000000 x22: 0001000000000010 x21: 0000000000000010
x20: ffff8000211a78a0 x19: 0000000000000000 x18: 0000000000000000
x17: ffff80000a5527fc x16: ffff800011b90080 x15: ffff80000a5527fc
x14: 0000000000000003 x13: 1ffff00004234f15 x12: 0000000000000000
x11: ff0080000a910304 x10: 0000000000000000 x9 : ffff80000a910304
x8 : ffff0000c4ffd400 x7 : 0000000000000000 x6 : ffff80000805a910
x5 : 00000000ffffffff x4 : 0000000000000008 x3 : 0000000000000010
x2 : 0000000000000000 x1 : 0001000000000010 x0 : 0000600000000000
Call trace:
 sg_set_buf include/linux/scatterlist.h:163 [inline]
 sg_init_one+0x1b4/0x1c8 lib/scatterlist.c:141
 software_key_eds_op+0x410/0x938 crypto/asymmetric_keys/public_key.c:277
 asymmetric_key_eds_op+0x108/0x128 crypto/asymmetric_keys/asymmetric_type.c:596
 keyctl_pkey_e_d_s+0x1c8/0x3a0 security/keys/keyctl_pkey.c:262
 __do_sys_keyctl security/keys/keyctl.c:2009 [inline]
 __se_sys_keyctl security/keys/keyctl.c:1886 [inline]
 __arm64_sys_keyctl+0x66c/0x8e0 security/keys/keyctl.c:1886
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: aa1503e0 977f91c6 17ffffec 976e8a31 (d4210000) 
---[ end trace 0000000000000000 ]---

Crashes (2056):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/05 16:48 linux-6.1.y fb28aa725e05 52aa2820 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/18 06:44 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/18 02:45 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/18 01:31 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/17 23:03 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/17 10:26 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/17 06:40 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/16 22:25 linux-6.1.y 79807e970724 4c840a2f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/16 21:17 linux-6.1.y 79807e970724 4c840a2f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/16 09:13 linux-6.1.y 79807e970724 3f2522c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/16 05:05 linux-6.1.y 79807e970724 3f2522c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/16 04:05 linux-6.1.y 79807e970724 3f2522c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/15 09:02 linux-6.1.y a500ba24937a 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/15 07:11 linux-6.1.y a500ba24937a 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/14 18:23 linux-6.1.y a500ba24937a 1a71827b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/14 17:52 linux-6.1.y a500ba24937a 1a71827b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/14 10:22 linux-6.1.y a500ba24937a 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/14 06:08 linux-6.1.y a500ba24937a 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/12 22:25 linux-6.1.y a500ba24937a 745a967f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/12 10:18 linux-6.1.y a500ba24937a 4f92358f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/18 08:25 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/17 19:44 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/17 17:32 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/17 17:31 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/17 14:09 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/17 07:43 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/17 06:03 linux-6.1.y 79807e970724 432c0077 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/16 19:00 linux-6.1.y 79807e970724 4c840a2f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/16 17:15 linux-6.1.y 79807e970724 4c840a2f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/16 09:23 linux-6.1.y 79807e970724 3f2522c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/16 02:29 linux-6.1.y 79807e970724 3f2522c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/15 19:51 linux-6.1.y 79807e970724 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/15 11:19 linux-6.1.y a500ba24937a 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/15 10:27 linux-6.1.y a500ba24937a 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/15 07:26 linux-6.1.y a500ba24937a 8fb0ae89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/15 00:12 linux-6.1.y a500ba24937a 1a71827b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/14 21:32 linux-6.1.y a500ba24937a 1a71827b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/14 19:28 linux-6.1.y a500ba24937a 1a71827b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/14 04:45 linux-6.1.y a500ba24937a 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/14 04:11 linux-6.1.y a500ba24937a 7321cd29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/13 19:39 linux-6.1.y a500ba24937a 5a1eeac4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/13 17:43 linux-6.1.y a500ba24937a 5a1eeac4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/13 14:32 linux-6.1.y a500ba24937a 5a1eeac4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/12 21:19 linux-6.1.y a500ba24937a 745a967f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/05 16:23 linux-6.1.y fb28aa725e05 52aa2820 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
* Struck through repros no longer work on HEAD.