sg_write: data in/out 2127708969/3 bytes for SCSI command 0xe3-- guessing data in; program syz-executor6 not setting count and/or reply_len properly kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 9382 Comm: syz-executor6 Not tainted 4.9.54-g34e23de #62 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801aa4a1800 task.stack: ffff8801aa4b0000 RIP: 0010:[] [] sg_start_req drivers/scsi/sg.c:1691 [inline] RIP: 0010:[] [] sg_common_write.isra.24+0x382/0x18d0 drivers/scsi/sg.c:777 RSP: 0018:ffff8801aa4b7800 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 00000000000000e3 RCX: ffffc90003a00000 RDX: 0000000000000002 RSI: ffff8801c6f2019c RDI: ffff8801c6f2019a RBP: ffff8801aa4b7998 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000002 R11: ffffed0035496f4d R12: 1ffff10035496f0e R13: ffff8801c6f20000 R14: ffff8801aa4b7a60 R15: ffff8801c6f20158 FS: 00007fe2e6e23700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000007f CR3: 00000001c4bfe000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8801aa4a1800 ffff8801c6f201e0 000000007ed24329 0000000000000010 ffff8801c6f2019c 0000000000000000 ffff880100001770 000000007ed24329 0000000000000000 ffff8801c6f20000 0000000020049fe3 ffff8801fffffffc Call Trace: [] sg_write+0x6a1/0xaf0 drivers/scsi/sg.c:680 [] do_loop_readv_writev.part.17+0x141/0x1e0 fs/read_write.c:714 [] do_loop_readv_writev fs/read_write.c:880 [inline] [] do_readv_writev+0x520/0x750 fs/read_write.c:874 [] vfs_writev+0x87/0xc0 fs/read_write.c:911 [] do_writev+0xe6/0x250 fs/read_write.c:944 [] SYSC_writev fs/read_write.c:1017 [inline] [] SyS_writev+0x27/0x30 fs/read_write.c:1014 [] entry_SYSCALL_64_fastpath+0x23/0xc6 Code: 42 66 89 85 90 fe ff ff 48 8b 85 c8 fe ff ff 48 83 c0 10 48 89 c2 48 89 85 80 fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 1b 15 00 00 48 8b 85 c8 fe ff ff 48 8b 58 10 RIP [] sg_start_req drivers/scsi/sg.c:1691 [inline] RIP [] sg_common_write.isra.24+0x382/0x18d0 drivers/scsi/sg.c:777 RSP ---[ end trace fa7d3a2ca7b722d5 ]--- Kernel panic - not syncing: Fatal exception Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 86400 seconds..