------------[ cut here ]------------
kernel BUG at include/linux/scatterlist.h:187!
Internal error: Oops - BUG: 0 [#1] PREEMPT SMP ARM
Modules linked in:
CPU: 1 PID: 11085 Comm: syz-executor.1 Not tainted 6.9.0-rc1-syzkaller #0
Hardware name: ARM-Versatile Express
PC is at sg_set_buf include/linux/scatterlist.h:187 [inline]
PC is at sg_init_one+0x9c/0xa8 lib/scatterlist.c:143
LR is at sg_init_table+0x2c/0x40 lib/scatterlist.c:128
pc : [<807e8648>]    lr : [<807e6a3c>]    psr: 80000113
sp : dfb45c38  ip : dfb45c70  fp : dfb45c54
r10: 00000000  r9 : ffedc004  r8 : ff7fbf1c
r7 : 00000043  r6 : dfb45c58  r5 : 83ba9000  r4 : ffedc004
r3 : df000000  r2 : ffffffd8  r1 : 00000000  r0 : dfb45c58
Flags: Nzcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none
Control: 30c5387d  Table: 84fc3f80  DAC: 00000000
Register r0 information: 2-page vmalloc region starting at 0xdfb44000 allocated at kernel_clone+0xac/0x3cc kernel/fork.c:2796
Register r1 information: NULL pointer
Register r2 information: non-paged memory
Register r3 information: non-paged memory
Register r4 information: non-paged memory
Register r5 information: slab vmap_area start 83ba9000 pointer offset 0 size 40
Register r6 information: 2-page vmalloc region starting at 0xdfb44000 allocated at kernel_clone+0xac/0x3cc kernel/fork.c:2796
Register r7 information: non-paged memory
Register r8 information: 0-page vmalloc region starting at 0xff7d8000 allocated at pcpu_get_vm_areas+0x0/0x12c8 mm/vmalloc.c:3064
Register r9 information: non-paged memory
Register r10 information: NULL pointer
Register r11 information: 2-page vmalloc region starting at 0xdfb44000 allocated at kernel_clone+0xac/0x3cc kernel/fork.c:2796
Register r12 information: 2-page vmalloc region starting at 0xdfb44000 allocated at kernel_clone+0xac/0x3cc kernel/fork.c:2796
Process syz-executor.1 (pid: 11085, stack limit = 0xdfb44000)
Stack: (0xdfb45c38 to 0xdfb46000)
5c20:                                                       ff7fbefc 83ba9000
5c40: debdd77c 82f2e0c0 dfb45cb4 dfb45c58 804c3dd4 807e85b8 00000002 00000000
5c60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
5c80: 00000000 00000000 00000001 e032eba1 83ba9000 00000001 debdd77c 8442a244
5ca0: 8442a240 8442a240 dfb45cdc dfb45cb8 804c6a18 804c3d24 debdd77c 00000001
5cc0: dfb45d4c 00000000 84105400 83fc3000 dfb45d2c dfb45ce0 804bbbf4 804c68c8
5ce0: 804bd118 802e2798 802033d4 00000000 00100cca 00000000 00000000 e032eba1
5d00: 8189aa28 00000001 00100cca 00000000 00000000 dfb45d4b 00000007 00000000
5d20: dfb45da4 dfb45d30 804bd614 804bbb58 dfb45d4b 00000000 dfb45d6c debdd77c
5d40: 00000001 00000001 01de4280 00000000 00000000 00000000 00000000 00000000
5d60: 00000001 00000000 dfb45d68 dfb45d68 818753b0 e032eba1 00000406 00000001
5d80: 00000000 00000001 84483360 00100cca 00000000 dfb45eb8 dfb45e1c dfb45da8
5da0: 804bd968 804bd45c 00000000 e032eba1 00000001 dfb45eb8 00000000 00000000
5dc0: dfb45df4 dfb45dd0 8042e9b0 8042e804 dfb45eb8 8260cac8 84483360 20000000
5de0: 83fc3000 00000000 dfb45e1c e032eba1 804bcde8 dfb45eb8 00000000 00000001
5e00: 84483360 83fc3000 00000000 00000040 dfb45e7c dfb45e20 8047f368 804bd90c
5e20: 8049445c 80479d1c dfb45eec 84105400 00000000 00000000 84105400 84c64300
5e40: dfb45e7c dfb45e50 83fc3000 804943e4 fbe96003 00001255 84105400 200000c0
5e60: 84483360 84105400 84c64300 00000040 dfb45f2c dfb45e80 80480c4c 8047f174
5e80: dfb45ee0 dfb45fb0 dfb45ea4 dfb45e98 8089c158 dfb45ee0 dfb45ecc dfb45ea8
5ea0: 8027caf4 802ac7ac 00000008 81c66394 dfb45eb8 dfb45fb0 84483360 00000cc0
5ec0: 00020000 20000000 200000c0 00001a55 84f04800 84fc3f80 00000180 00000000
5ee0: 00000000 00000000 00000000 def65d2c 00000000 00000000 20ffffff e032eba1
5f00: 00000000 dfb45fb0 200000c0 00000255 00000a07 84105400 84c64300 00000002
5f20: dfb45f74 dfb45f30 80215e14 80480880 81897c90 81897b5c dfb45f5c dfb45f48
5f40: 8024c880 84483360 40000000 8261d0e0 00000a07 200000c0 dfb45fb0 80215c4c
5f60: 0014c29c 7ea174dc dfb45fac dfb45f78 802161dc 80215c58 dfb45fac dfb45f88
5f80: 8020ca6c 80203060 0006b3f4 00048f78 00000010 ffffffff 84105400 824a9044
5fa0: 00000000 dfb45fb0 80200e3c 802161b0 200000c0 76b03258 ffffffea 00c781f0
5fc0: 7ea17484 0014d490 00000000 000001f4 5e3a3a3a 0014c29c 7ea174dc 000d6c44
5fe0: 00000018 7ea173d4 255e2540 00048f78 00000010 ffffffff 00000000 00000000
Call trace: 
[<807e85ac>] (sg_init_one) from [<804c3dd4>] (zswap_decompress+0xbc/0x208 mm/zswap.c:1089)
 r7:82f2e0c0 r6:debdd77c r5:83ba9000 r4:ff7fbefc
[<804c3d18>] (zswap_decompress) from [<804c6a18>] (zswap_load+0x15c/0x198 mm/zswap.c:1637)
 r9:8442a240 r8:8442a240 r7:8442a244 r6:debdd77c r5:00000001 r4:83ba9000
[<804c68bc>] (zswap_load) from [<804bbbf4>] (swap_read_folio+0xa8/0x498 mm/page_io.c:518)
 r9:83fc3000 r8:84105400 r7:00000000 r6:dfb45d4c r5:00000001 r4:debdd77c
[<804bbb4c>] (swap_read_folio) from [<804bd614>] (swap_cluster_readahead+0x1c4/0x34c mm/swap_state.c:684)
 r10:00000000 r9:00000007 r8:dfb45d4b r7:00000000 r6:00000000 r5:00100cca
 r4:00000001
[<804bd450>] (swap_cluster_readahead) from [<804bd968>] (swapin_readahead+0x68/0x4a8 mm/swap_state.c:904)
 r10:dfb45eb8 r9:00000000 r8:00100cca r7:84483360 r6:00000001 r5:00000000
 r4:00000001
[<804bd900>] (swapin_readahead) from [<8047f368>] (do_swap_page+0x200/0xcc4 mm/memory.c:4046)
 r10:00000040 r9:00000000 r8:83fc3000 r7:84483360 r6:00000001 r5:00000000
 r4:dfb45eb8
[<8047f168>] (do_swap_page) from [<80480c4c>] (handle_pte_fault mm/memory.c:5301 [inline])
[<8047f168>] (do_swap_page) from [<80480c4c>] (__handle_mm_fault mm/memory.c:5439 [inline])
[<8047f168>] (do_swap_page) from [<80480c4c>] (handle_mm_fault+0x3d8/0x12b8 mm/memory.c:5604)
 r10:00000040 r9:84c64300 r8:84105400 r7:84483360 r6:200000c0 r5:84105400
 r4:00001255
[<80480874>] (handle_mm_fault) from [<80215e14>] (do_page_fault+0x1c8/0x3a8 arch/arm/mm/fault.c:299)
 r10:00000002 r9:84c64300 r8:84105400 r7:00000a07 r6:00000255 r5:200000c0
 r4:dfb45fb0
[<80215c4c>] (do_page_fault) from [<802161dc>] (do_DataAbort+0x38/0xa8 arch/arm/mm/fault.c:565)
 r10:7ea174dc r9:0014c29c r8:80215c4c r7:dfb45fb0 r6:200000c0 r5:00000a07
 r4:8261d0e0
[<802161a4>] (do_DataAbort) from [<80200e3c>] (__dabt_usr+0x5c/0x60 arch/arm/kernel/entry-armv.S:427)
Exception stack(0xdfb45fb0 to 0xdfb45ff8)
5fa0:                                     200000c0 76b03258 ffffffea 00c781f0
5fc0: 7ea17484 0014d490 00000000 000001f4 5e3a3a3a 0014c29c 7ea174dc 000d6c44
5fe0: 00000018 7ea173d4 255e2540 00048f78 00000010 ffffffff
 r8:824a9044 r7:84105400 r6:ffffffff r5:00000010 r4:00048f78
Code: 1a000004 e1822003 e8860094 e89da8f0 (e7f001f2) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	1a000004 	bne	0x18
   4:	e1822003 	orr	r2, r2, r3
   8:	e8860094 	stm	r6, {r2, r4, r7}
   c:	e89da8f0 	ldm	sp, {r4, r5, r6, r7, fp, sp, pc}
* 10:	e7f001f2 	udf	#18 <-- trapping instruction