Warning: Permanently added '10.128.0.216' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 55.112914][ T3598] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 55.124632][ T3598] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 55.133020][ T3598] CPU: 1 PID: 3598 Comm: syz-executor657 Not tainted 5.16.0-rc5-syzkaller #0 [ 55.141845][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.151882][ T3598] RIP: 0010:sg_alloc_append_table_from_pages+0x821/0xdb0 [ 55.158906][ T3598] Code: 0c 24 48 8b 4c 24 48 48 39 c8 48 0f 46 c8 89 f0 4c 8d 3c c7 48 89 4c 24 30 48 b9 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <80> 3c 08 00 0f 85 24 05 00 00 4d 8b 3f 4c 89 e0 31 ff 83 e0 03 48 [ 55.178497][ T3598] RSP: 0018:ffffc90001a4fc48 EFLAGS: 00010202 [ 55.184547][ T3598] RAX: 0000000000000002 RBX: 0000000000000001 RCX: dffffc0000000000 [ 55.192500][ T3598] RDX: ffff888021fa1d00 RSI: 0000000000000000 RDI: 0000000000000010 [ 55.200452][ T3598] RBP: 00000000fffff000 R08: fffffffffffff000 R09: ffff888021ec0880 [ 55.208404][ T3598] R10: ffffffff83d88b30 R11: 0000000000000000 R12: 0000000000000002 [ 55.216361][ T3598] R13: ffff888021ec0880 R14: 0000000000000000 R15: 0000000000000010 [ 55.224312][ T3598] FS: 0000555555e55300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 55.233221][ T3598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.239790][ T3598] CR2: 00005611a5054da0 CR3: 000000001e15f000 CR4: 00000000003506e0 [ 55.247752][ T3598] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.255708][ T3598] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.263664][ T3598] Call Trace: [ 55.267011][ T3598] [ 55.269925][ T3598] sg_alloc_table_from_pages_segment+0xc9/0x260 [ 55.276157][ T3598] ? sg_alloc_append_table_from_pages+0xdb0/0xdb0 [ 55.282559][ T3598] ? rcu_read_lock_sched_held+0x3a/0x70 [ 55.288088][ T3598] get_sg_table.isra.0+0xbb/0x160 [ 55.293105][ T3598] begin_cpu_udmabuf+0x130/0x1d0 [ 55.298071][ T3598] ? map_udmabuf+0xa0/0xa0 [ 55.302474][ T3598] dma_buf_begin_cpu_access+0xfd/0x1d0 [ 55.307915][ T3598] dma_buf_ioctl+0x29a/0x380 [ 55.312486][ T3598] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 55.318199][ T3598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 55.324422][ T3598] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 55.330123][ T3598] __x64_sys_ioctl+0x193/0x200 [ 55.334868][ T3598] do_syscall_64+0x35/0xb0 [ 55.339279][ T3598] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.345155][ T3598] RIP: 0033:0x7fb958a61079 [ 55.349550][ T3598] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 55.369221][ T3598] RSP: 002b:00007ffeb9c34248 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.377610][ T3598] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb958a61079 [ 55.385563][ T3598] RDX: 0000000020000000 RSI: 0000000040086200 RDI: 0000000000000004 [ 55.393511][ T3598] RBP: 00007fb958a25060 R08: 0000000000000000 R09: 0000000000000000 [ 55.401631][ T3598] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb958a250f0 [ 55.409591][ T3598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.417546][ T3598] [ 55.420541][ T3598] Modules linked in: [ 55.426020][ T3598] ---[ end trace 5b473199a7616b19 ]--- [ 55.431494][ T3598] RIP: 0010:sg_alloc_append_table_from_pages+0x821/0xdb0 [ 55.438528][ T3598] Code: 0c 24 48 8b 4c 24 48 48 39 c8 48 0f 46 c8 89 f0 4c 8d 3c c7 48 89 4c 24 30 48 b9 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <80> 3c 08 00 0f 85 24 05 00 00 4d 8b 3f 4c 89 e0 31 ff 83 e0 03 48 [ 55.458555][ T3598] RSP: 0018:ffffc90001a4fc48 EFLAGS: 00010202 [ 55.464707][ T3598] RAX: 0000000000000002 RBX: 0000000000000001 RCX: dffffc0000000000 [ 55.472745][ T3598] RDX: ffff888021fa1d00 RSI: 0000000000000000 RDI: 0000000000000010 [ 55.480768][ T3598] RBP: 00000000fffff000 R08: fffffffffffff000 R09: ffff888021ec0880 [ 55.488734][ T3598] R10: ffffffff83d88b30 R11: 0000000000000000 R12: 0000000000000002 [ 55.496751][ T3598] R13: ffff888021ec0880 R14: 0000000000000000 R15: 0000000000000010 [ 55.504855][ T3598] FS: 0000555555e55300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 55.513808][ T3598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.520411][ T3598] CR2: 0000000020005b4c CR3: 000000001e15f000 CR4: 00000000003506f0 [ 55.528365][ T3598] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.536345][ T3598] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.544332][ T3598] Kernel panic - not syncing: Fatal exception [ 55.550660][ T3598] Kernel Offset: disabled [ 55.554968][ T3598] Rebooting in 86400 seconds..