kernel BUG in sg_init_one

Status: upstream: reported C repro on 2026/08/05 16:23
Reported-by: syzbot+b2c0fcf268006aa33591@syzkaller.appspotmail.com
First crash: 31d, last: 11h17m
Bug presence (1)
Date Name Commit Repro Result
2026/08/14 upstream (ToT) a5161661ae99 C Failed due to an error; will retry later
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 kernel BUG in sg_init_one -1 syz, C 343 1h24m 30d 0/3 upstream: reported C repro on 2026/08/06 01:45
linux-6.6 kernel BUG in sg_init_one origin:lts-only -1 syz, C 4 17d 39d 0/2 upstream: reported C repro on 2026/07/28 11:30
upstream kernel BUG in sg_init_one mm -1 syz, C 1032 891d 901d 25/29 fixed on 2024/05/22 23:08

Sample crash report:
------------[ cut here ]------------
kernel BUG at include/linux/scatterlist.h:163!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4535 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : sg_set_buf include/linux/scatterlist.h:163 [inline]
pc : sg_init_one+0x1b4/0x1c8 lib/scatterlist.c:141
lr : sg_set_buf include/linux/scatterlist.h:163 [inline]
lr : sg_init_one+0x1b4/0x1c8 lib/scatterlist.c:141
sp : ffff8000211a7750
x29: ffff8000211a7750 x28: ffff0000ca8ea500 x27: dfff800000000000
x26: ffff0000d6237a0e x25: ffff700004234f00 x24: 1ffff00004234f14
x23: dfff800000000000 x22: 0001000000000010 x21: 0000000000000010
x20: ffff8000211a78a0 x19: 0000000000000000 x18: 0000000000000000
x17: ffff80000a5527fc x16: ffff800011b90080 x15: ffff80000a5527fc
x14: 0000000000000003 x13: 1ffff00004234f15 x12: 0000000000000000
x11: ff0080000a910304 x10: 0000000000000000 x9 : ffff80000a910304
x8 : ffff0000c4ffd400 x7 : 0000000000000000 x6 : ffff80000805a910
x5 : 00000000ffffffff x4 : 0000000000000008 x3 : 0000000000000010
x2 : 0000000000000000 x1 : 0001000000000010 x0 : 0000600000000000
Call trace:
 sg_set_buf include/linux/scatterlist.h:163 [inline]
 sg_init_one+0x1b4/0x1c8 lib/scatterlist.c:141
 software_key_eds_op+0x410/0x938 crypto/asymmetric_keys/public_key.c:277
 asymmetric_key_eds_op+0x108/0x128 crypto/asymmetric_keys/asymmetric_type.c:596
 keyctl_pkey_e_d_s+0x1c8/0x3a0 security/keys/keyctl_pkey.c:262
 __do_sys_keyctl security/keys/keyctl.c:2009 [inline]
 __se_sys_keyctl security/keys/keyctl.c:1886 [inline]
 __arm64_sys_keyctl+0x66c/0x8e0 security/keys/keyctl.c:1886
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: aa1503e0 977f91c6 17ffffec 976e8a31 (d4210000) 
---[ end trace 0000000000000000 ]---

Crashes (914):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/05 16:48 linux-6.1.y fb28aa725e05 52aa2820 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/09/05 08:54 linux-6.1.y cf82dcca9634 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/09/05 07:43 linux-6.1.y cf82dcca9634 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/09/05 05:58 linux-6.1.y cf82dcca9634 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/09/04 17:04 linux-6.1.y cf82dcca9634 f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/09/03 11:26 linux-6.1.y cf82dcca9634 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/09/03 03:24 linux-6.1.y cf82dcca9634 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/09/03 00:44 linux-6.1.y cf82dcca9634 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/09/01 20:55 linux-6.1.y d64a499eea6b 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/09/01 02:07 linux-6.1.y d64a499eea6b 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/09/01 00:45 linux-6.1.y d64a499eea6b 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/31 23:34 linux-6.1.y d64a499eea6b 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/30 20:14 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/30 14:09 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/30 14:06 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/30 09:17 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/30 03:07 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/30 00:53 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/29 23:33 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/29 17:26 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/29 07:39 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/29 05:03 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/28 17:27 linux-6.1.y d64a499eea6b e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/08/28 16:20 linux-6.1.y d64a499eea6b e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/09/05 10:35 linux-6.1.y cf82dcca9634 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/09/05 04:52 linux-6.1.y cf82dcca9634 4f7b22a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/09/04 20:00 linux-6.1.y cf82dcca9634 f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/09/04 19:14 linux-6.1.y cf82dcca9634 f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/09/04 18:12 linux-6.1.y cf82dcca9634 f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/09/04 15:52 linux-6.1.y cf82dcca9634 f65209a4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/09/04 07:42 linux-6.1.y cf82dcca9634 801f0966 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/09/03 14:37 linux-6.1.y cf82dcca9634 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/09/03 14:18 linux-6.1.y cf82dcca9634 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/09/02 23:23 linux-6.1.y cf82dcca9634 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/09/02 22:17 linux-6.1.y cf82dcca9634 85995287 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/09/01 19:15 linux-6.1.y d64a499eea6b 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/09/01 18:28 linux-6.1.y d64a499eea6b 587f6b29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/31 14:24 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/30 13:05 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/30 06:50 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/30 03:52 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/29 22:14 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/29 16:23 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/29 02:55 linux-6.1.y d64a499eea6b 2f52988a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/28 15:30 linux-6.1.y d64a499eea6b e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/05 16:23 linux-6.1.y fb28aa725e05 52aa2820 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
* Struck through repros no longer work on HEAD.