general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
CPU: 0 PID: 91 Comm: kworker/u4:3 Not tainted 5.18.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: pencrypt_parallel padata_parallel_worker
RIP: 0010:scatterwalk_start include/crypto/scatterwalk.h:69 [inline]
RIP: 0010:scatterwalk_pagedone include/crypto/scatterwalk.h:89 [inline]
RIP: 0010:scatterwalk_pagedone include/crypto/scatterwalk.h:78 [inline]
RIP: 0010:scatterwalk_copychunks+0x3db/0x680 crypto/scatterwalk.c:50
Code: 00 00 00 00 00 fc ff df 80 3c 02 00 0f 85 5f 02 00 00 49 8d 55 08 4d 89 2e 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 04 01 84 c0 74 08 3c 03 0f 8e 20 02 00 00 4c 89 e1 41 8b 75
RSP: 0018:ffffc90001c4f6c0 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000008 RSI: 0000000000000000 RDI: ffff8880152eb258
RBP: ffff8880187202f8 R08: 0000000000000001 R09: 0000000000000000
R10: ffff8880152eb038 R11: 000000000007c079 R12: ffffc90001c4f8d0
R13: 0000000000000000 R14: ffffc90001c4f8c8 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020001340 CR3: 000000001816b000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 skcipher_next_slow crypto/skcipher.c:278 [inline]
 skcipher_walk_next+0x620/0x1730 crypto/skcipher.c:363
 skcipher_walk_aead_common+0x7e6/0xc40 crypto/skcipher.c:539
 gcmaes_crypt_by_sg+0x282/0x6f0 arch/x86/crypto/aesni-intel_glue.c:658
 gcmaes_encrypt+0xcd/0x200 arch/x86/crypto/aesni-intel_glue.c:722
 generic_gcmaes_encrypt+0x128/0x190 arch/x86/crypto/aesni-intel_glue.c:1076
 pcrypt_aead_enc+0x11/0x60 crypto/pcrypt.c:83
 padata_parallel_worker+0x56/0xa0 kernel/padata.c:144
 process_one_work+0x841/0x13a0 kernel/workqueue.c:2289
 worker_thread+0x598/0xec0 kernel/workqueue.c:2436
 kthread+0x299/0x340 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:scatterwalk_start include/crypto/scatterwalk.h:69 [inline]
RIP: 0010:scatterwalk_pagedone include/crypto/scatterwalk.h:89 [inline]
RIP: 0010:scatterwalk_pagedone include/crypto/scatterwalk.h:78 [inline]
RIP: 0010:scatterwalk_copychunks+0x3db/0x680 crypto/scatterwalk.c:50
Code: 00 00 00 00 00 fc ff df 80 3c 02 00 0f 85 5f 02 00 00 49 8d 55 08 4d 89 2e 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 04 01 84 c0 74 08 3c 03 0f 8e 20 02 00 00 4c 89 e1 41 8b 75
RSP: 0018:ffffc90001c4f6c0 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000008 RSI: 0000000000000000 RDI: ffff8880152eb258
RBP: ffff8880187202f8 R08: 0000000000000001 R09: 0000000000000000
R10: ffff8880152eb038 R11: 000000000007c079 R12: ffffc90001c4f8d0
R13: 0000000000000000 R14: ffffc90001c4f8c8 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020001340 CR3: 000000001816b000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess), 7 bytes skipped:
   0:	df 80 3c 02 00 0f    	filds  0xf00023c(%rax)
   6:	85 5f 02             	test   %ebx,0x2(%rdi)
   9:	00 00                	add    %al,(%rax)
   b:	49 8d 55 08          	lea    0x8(%r13),%rdx
   f:	4d 89 2e             	mov    %r13,(%r14)
  12:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  19:	fc ff df
  1c:	48 89 d1             	mov    %rdx,%rcx
  1f:	48 c1 e9 03          	shr    $0x3,%rcx
* 23:	0f b6 04 01          	movzbl (%rcx,%rax,1),%eax <-- trapping instruction
  27:	84 c0                	test   %al,%al
  29:	74 08                	je     0x33
  2b:	3c 03                	cmp    $0x3,%al
  2d:	0f 8e 20 02 00 00    	jle    0x253
  33:	4c 89 e1             	mov    %r12,%rcx
  36:	41                   	rex.B
  37:	8b                   	.byte 0x8b
  38:	75                   	.byte 0x75