sg_write: data in/out 8454115/514 bytes for SCSI command 0x0-- guessing data in; program syzkaller598802 not setting count and/or reply_len properly kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 3320 Comm: syzkaller598802 Not tainted 4.4.112-g3fc4284 #32 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801d15c2f80 task.stack: ffff8800b3c10000 RIP: 0010:[] [] sg_read_oxfer drivers/scsi/sg.c:1986 [inline] RIP: 0010:[] [] sg_read+0xd1d/0x1490 drivers/scsi/sg.c:531 RSP: 0018:ffff8800b3c17b00 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff825bc944 RDX: 0000000000000000 RSI: 0000000020f93fef RDI: ffff8800b4d0a270 RBP: ffff8800b3c17c08 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 1ffff10016782f26 R12: 000000000000001a R13: 0000000000000000 R14: ffff8801d0453a80 R15: ffff8800b4d0a240 FS: 000000000200f880(0063) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020f93fcb CR3: 00000000b08d4000 CR4: 0000000000160670 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: 0000000000000000 000077ff80000000 ffff8800b3c17b60 ffff8800b4d0a258 0000000000000008 ffff8800b4d0a268 000000000000003e 0000000000000001 ffff8800b7c96c80 0000000000001000 1ffff10016782f6c 0000000020f93fef Call Trace: [] do_loop_readv_writev+0x141/0x1e0 fs/read_write.c:680 [] do_readv_writev+0x5dd/0x6e0 fs/read_write.c:810 [] vfs_readv+0x78/0xb0 fs/read_write.c:834 [] SYSC_readv fs/read_write.c:860 [inline] [] SyS_readv+0xd9/0x240 fs/read_write.c:852 [] entry_SYSCALL_64_fastpath+0x16/0x92 Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 97 06 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5f 28 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 6b 06 00 00 48 8b 1b 48 85 db 0f 84 3b 03 00 RIP [] sg_read_oxfer drivers/scsi/sg.c:1986 [inline] RIP [] sg_read+0xd1d/0x1490 drivers/scsi/sg.c:531 RSP ---[ end trace 08b8c0ce5d181d09 ]--- Kernel panic - not syncing: Fatal exception Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 86400 seconds..