Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 2 UID: 0 PID: 5992 Comm: syz.3.11 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:crypt_copy_authenckey drivers/md/dm-crypt.c:2396 [inline]
RIP: 0010:crypt_setkey+0x6a2/0x910 drivers/md/dm-crypt.c:2417
Code: 00 0f 85 1f 02 00 00 4c 8b a3 58 06 00 00 45 89 f7 48 b8 00 00 00 00 00 fc ff df 41 0f cf 49 8d 7c 24 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 22
RSP: 0018:ffffc9000279f7d0 EFLAGS: 00010247
RAX: dffffc0000000000 RBX: ffff888034eec000 RCX: ffffc90024019000
RDX: 0000000000000000 RSI: ffffffff88b39970 RDI: 0000000000000004
RBP: 0000000000000020 R08: 0000000000000004 R09: 0000000000000020
R10: 0000000000000020 R11: 0000000000000000 R12: 0000000000000000
R13: ffff888034eec660 R14: 0000000000000000 R15: 0000000000000000
FS:  00007fac5ddff6c0(0000) GS:ffff8880d4698000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c2551e8 CR3: 0000000058e3a000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 crypt_set_key+0x1c8/0x630 drivers/md/dm-crypt.c:2642
 crypt_ctr_cipher drivers/md/dm-crypt.c:3067 [inline]
 crypt_ctr+0x1091/0x3d10 drivers/md/dm-crypt.c:3254
 dm_table_add_target+0x58b/0xee0 drivers/md/dm-table.c:749
 populate_table drivers/md/dm-ioctl.c:1602 [inline]
 table_load+0x3b9/0x7b0 drivers/md/dm-ioctl.c:1645
 ctl_ioctl+0x4d2/0xcc0 drivers/md/dm-ioctl.c:2221
 dm_ctl_ioctl+0x22/0x30 drivers/md/dm-ioctl.c:2243
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fac5cf9f559
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fac5ddff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fac5d225fa0 RCX: 00007fac5cf9f559
RDX: 0000200000000600 RSI: 00000000c138fd09 RDI: 0000000000000003
RBP: 00007fac5d036b20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fac5d226038 R14: 00007fac5d225fa0 R15: 00007ffe00b5bed8
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:crypt_copy_authenckey drivers/md/dm-crypt.c:2396 [inline]
RIP: 0010:crypt_setkey+0x6a2/0x910 drivers/md/dm-crypt.c:2417
Code: 00 0f 85 1f 02 00 00 4c 8b a3 58 06 00 00 45 89 f7 48 b8 00 00 00 00 00 fc ff df 41 0f cf 49 8d 7c 24 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 22
RSP: 0018:ffffc9000279f7d0 EFLAGS: 00010247
RAX: dffffc0000000000 RBX: ffff888034eec000 RCX: ffffc90024019000
RDX: 0000000000000000 RSI: ffffffff88b39970 RDI: 0000000000000004
RBP: 0000000000000020 R08: 0000000000000004 R09: 0000000000000020
R10: 0000000000000020 R11: 0000000000000000 R12: 0000000000000000
R13: ffff888034eec660 R14: 0000000000000000 R15: 0000000000000000
FS:  00007fac5ddff6c0(0000) GS:ffff8880d4698000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fac5ddded58 CR3: 0000000058e3a000 CR4: 0000000000352ef0
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	0f 85 1f 02 00 00    	jne    0x225
   6:	4c 8b a3 58 06 00 00 	mov    0x658(%rbx),%r12
   d:	45 89 f7             	mov    %r14d,%r15d
  10:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  17:	fc ff df
  1a:	41 0f cf             	bswap  %r15d
  1d:	49 8d 7c 24 04       	lea    0x4(%r12),%rdi
  22:	48 89 fa             	mov    %rdi,%rdx
  25:	48 c1 ea 03          	shr    $0x3,%rdx
* 29:	0f b6 14 02          	movzbl (%rdx,%rax,1),%edx <-- trapping instruction
  2d:	48 89 f8             	mov    %rdi,%rax
  30:	83 e0 07             	and    $0x7,%eax
  33:	83 c0 03             	add    $0x3,%eax
  36:	38 d0                	cmp    %dl,%al
  38:	7c 08                	jl     0x42
  3a:	84 d2                	test   %dl,%dl
  3c:	0f                   	.byte 0xf
  3d:	85 22                	test   %esp,(%rdx)