kernel BUG in sg_init_one

Status: upstream: reported C repro on 2026/08/05 16:23
Reported-by: syzbot+b2c0fcf268006aa33591@syzkaller.appspotmail.com
First crash: 92d, last: 3h30m
▶ ▼ Bug presence (1)
Date Name Commit Repro Result
2026/08/14 upstream (ToT) a5161661ae99 C Failed due to an error; will retry later
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 kernel BUG in sg_init_one origin:lts-only -1 syz, C 1072 7h49m 91d 0/3 upstream: reported C repro on 2026/08/06 01:45
linux-6.6 kernel BUG in sg_init_one origin:lts-only -1 syz, C 4 41d 100d 0/2 upstream: reported C repro on 2026/07/28 11:30
upstream kernel BUG in sg_init_one mm -1 syz, C 1032 952d 962d 25/29 fixed on 2024/05/22 23:08

Sample crash report:
------------[ cut here ]------------
kernel BUG at include/linux/scatterlist.h:163!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4535 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : sg_set_buf include/linux/scatterlist.h:163 [inline]
pc : sg_init_one+0x1b4/0x1c8 lib/scatterlist.c:141
lr : sg_set_buf include/linux/scatterlist.h:163 [inline]
lr : sg_init_one+0x1b4/0x1c8 lib/scatterlist.c:141
sp : ffff8000211a7750
x29: ffff8000211a7750 x28: ffff0000ca8ea500 x27: dfff800000000000
x26: ffff0000d6237a0e x25: ffff700004234f00 x24: 1ffff00004234f14
x23: dfff800000000000 x22: 0001000000000010 x21: 0000000000000010
x20: ffff8000211a78a0 x19: 0000000000000000 x18: 0000000000000000
x17: ffff80000a5527fc x16: ffff800011b90080 x15: ffff80000a5527fc
x14: 0000000000000003 x13: 1ffff00004234f15 x12: 0000000000000000
x11: ff0080000a910304 x10: 0000000000000000 x9 : ffff80000a910304
x8 : ffff0000c4ffd400 x7 : 0000000000000000 x6 : ffff80000805a910
x5 : 00000000ffffffff x4 : 0000000000000008 x3 : 0000000000000010
x2 : 0000000000000000 x1 : 0001000000000010 x0 : 0000600000000000
Call trace:
 sg_set_buf include/linux/scatterlist.h:163 [inline]
 sg_init_one+0x1b4/0x1c8 lib/scatterlist.c:141
 software_key_eds_op+0x410/0x938 crypto/asymmetric_keys/public_key.c:277
 asymmetric_key_eds_op+0x108/0x128 crypto/asymmetric_keys/asymmetric_type.c:596
 keyctl_pkey_e_d_s+0x1c8/0x3a0 security/keys/keyctl_pkey.c:262
 __do_sys_keyctl security/keys/keyctl.c:2009 [inline]
 __se_sys_keyctl security/keys/keyctl.c:1886 [inline]
 __arm64_sys_keyctl+0x66c/0x8e0 security/keys/keyctl.c:1886
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: aa1503e0 977f91c6 17ffffec 976e8a31 (d4210000) 
---[ end trace 0000000000000000 ]---

Crashes (2806):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/05 16:48 linux-6.1.y fb28aa725e05 52aa2820 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/05 15:10 linux-6.1.y 08889840163e 2ee8459f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/05 14:56 linux-6.1.y 08889840163e 2ee8459f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/05 03:09 linux-6.1.y 08889840163e 73438ed0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/04 20:30 linux-6.1.y 08889840163e 73438ed0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/04 19:11 linux-6.1.y 08889840163e 73438ed0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/04 11:47 linux-6.1.y 08889840163e 5af5b6c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/03 21:13 linux-6.1.y 08889840163e e2d35131 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/03 09:30 linux-6.1.y 08889840163e 6969b601 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/03 07:20 linux-6.1.y 08889840163e 6969b601 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/02 07:09 linux-6.1.y 08889840163e 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/02 05:08 linux-6.1.y 08889840163e 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/02 03:49 linux-6.1.y 08889840163e 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/02 02:59 linux-6.1.y 08889840163e 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/01 18:40 linux-6.1.y 08889840163e 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/01 14:08 linux-6.1.y 08889840163e 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/01 08:10 linux-6.1.y 08889840163e 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/31 20:30 linux-6.1.y 08889840163e 2041d3f8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/31 18:03 linux-6.1.y 08889840163e 2041d3f8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/31 14:10 linux-6.1.y 08889840163e 2041d3f8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/31 12:49 linux-6.1.y 08889840163e 2041d3f8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/10/31 05:11 linux-6.1.y 08889840163e 0ec395f8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan kernel BUG in sg_init_one
2026/11/05 19:04 linux-6.1.y 08889840163e 2ee8459f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/05 13:40 linux-6.1.y 08889840163e 2ee8459f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/05 00:23 linux-6.1.y 08889840163e 73438ed0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/04 22:56 linux-6.1.y 08889840163e 73438ed0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/04 22:06 linux-6.1.y 08889840163e 73438ed0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/04 13:26 linux-6.1.y 08889840163e 5af5b6c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/04 11:01 linux-6.1.y 08889840163e 5af5b6c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/04 10:37 linux-6.1.y 08889840163e 5af5b6c6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/03 20:01 linux-6.1.y 08889840163e e2d35131 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/03 20:01 linux-6.1.y 08889840163e e2d35131 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/03 03:46 linux-6.1.y 08889840163e 6969b601 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/02 23:56 linux-6.1.y 08889840163e 6969b601 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/02 17:57 linux-6.1.y 08889840163e 6969b601 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/02 17:55 linux-6.1.y 08889840163e 6969b601 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/02 09:42 linux-6.1.y 08889840163e 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/02 01:56 linux-6.1.y 08889840163e 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/02 01:25 linux-6.1.y 08889840163e 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/01 17:39 linux-6.1.y 08889840163e 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/11/01 11:07 linux-6.1.y 08889840163e 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/31 18:17 linux-6.1.y 08889840163e 2041d3f8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/31 16:26 linux-6.1.y 08889840163e 2041d3f8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/31 15:33 linux-6.1.y 08889840163e 2041d3f8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/10/31 08:23 linux-6.1.y 08889840163e 0ec395f8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
2026/08/05 16:23 linux-6.1.y fb28aa725e05 52aa2820 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 kernel BUG in sg_init_one
* Struck through repros no longer work on HEAD.