[v6.1] general protection fault in emi26_probe
2 views
Skip to first unread message
syzbot
Jul 28, 2026, 7:32:26 AM (6 days ago) Jul 28
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: dc5c83b7f5f8 Linux 6.1.178
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1554e7b1580000
kernel config: https://syzkaller.appspot.com/x/.config?x=31dfefc4a14efea3
dashboard link: https://syzkaller.appspot.com/bug?extid=fc590201ba6fff657dbb
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/a9aa438e39c2/disk-dc5c83b7.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/a7b5afd2e170/vmlinux-dc5c83b7.xz
kernel image: https://storage.googleapis.com/syzbot-assets/3c7673d370fb/bzImage-dc5c83b7.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+fc5902...@syzkaller.appspotmail.com
emi26 - firmware loader 1-1:1.0: emi26_probe start
general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 PID: 4342 Comm: kworker/1:5 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x282/0x1610 drivers/usb/misc/emi26.c:232
Code: ff 89 de e8 30 fd 56 f7 85 db 0f 84 cc 01 00 00 e8 43 fa 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc90004086ee0 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000
RDX: ffffc9001ab42000 RSI: 0000000000014067 RDI: 0000000000000004
RBP: ffffc90004087020 R08: ffffffff90b0f2af R09: 1ffffffff2161e55
R10: dffffc0000000000 R11: fffffbfff2161e56 R12: fffffffffffffffa
R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f418d782ff8 CR3: 000000007ba33000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
usb_probe_interface+0x5be/0xae0 drivers/usb/core/driver.c:396
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x24a/0xb40 drivers/base/dd.c:638
__driver_probe_device+0x1f5/0x390 drivers/base/dd.c:804
driver_probe_device+0x4f/0x420 drivers/base/dd.c:834
__device_attach_driver+0x2c6/0x510 drivers/base/dd.c:962
bus_for_each_drv+0x184/0x210 drivers/base/bus.c:429
__device_attach+0x2a7/0x480 drivers/base/dd.c:1034
bus_probe_device+0xba/0x1d0 drivers/base/bus.c:489
device_add+0xbcf/0x1050 drivers/base/core.c:3712
usb_set_configuration+0x19d5/0x2030 drivers/usb/core/message.c:2223
usb_generic_driver_probe+0x89/0x150 drivers/usb/core/generic.c:238
usb_probe_device+0x126/0x250 drivers/usb/core/driver.c:293
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x24a/0xb40 drivers/base/dd.c:638
__driver_probe_device+0x1f5/0x390 drivers/base/dd.c:804
driver_probe_device+0x4f/0x420 drivers/base/dd.c:834
__device_attach_driver+0x2c6/0x510 drivers/base/dd.c:962
bus_for_each_drv+0x184/0x210 drivers/base/bus.c:429
__device_attach+0x2a7/0x480 drivers/base/dd.c:1034
bus_probe_device+0xba/0x1d0 drivers/base/bus.c:489
device_add+0xbcf/0x1050 drivers/base/core.c:3712
usb_new_device+0xa01/0x15e0 drivers/usb/core/hub.c:2659
hub_port_connect drivers/usb/core/hub.c:5517 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5657 [inline]
port_event drivers/usb/core/hub.c:5817 [inline]
hub_event+0x2b2f/0x5200 drivers/usb/core/hub.c:5899
process_one_work+0x8ab/0x1160 kernel/workqueue.c:2292
worker_thread+0xaf5/0x12a0 kernel/workqueue.c:2439
kthread+0x29d/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
</TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x282/0x1610 drivers/usb/misc/emi26.c:232
Code: ff 89 de e8 30 fd 56 f7 85 db 0f 84 cc 01 00 00 e8 43 fa 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc90004086ee0 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000
RDX: ffffc9001ab42000 RSI: 0000000000014067 RDI: 0000000000000004
RBP: ffffc90004087020 R08: ffffffff90b0f2af R09: 1ffffffff2161e55
R10: dffffc0000000000 R11: fffffbfff2161e56 R12: fffffffffffffffa
R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f07d8b4cfe8 CR3: 000000002730b000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: ff 89 de e8 30 fd decl -0x2cf1722(%rcx)
6: 56 push %rsi
7: f7 85 db 0f 84 cc 01 testl $0xe8000001,-0x337bf025(%rbp)
e: 00 00 e8
11: 43 fa rex.XB cli
13: 56 push %rsi
14: f7 48 bb 00 00 00 00 testl $0x0,-0x45(%rax)
1b: 00 fc add %bh,%ah
1d: ff lcall (bad)
1e: df 49 8d fisttps -0x73(%rcx)
21: 7d 04 jge 0x27
23: 48 89 f8 mov %rdi,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 0f b6 04 18 movzbl (%rax,%rbx,1),%eax <-- trapping instruction
2e: 84 c0 test %al,%al
30: 75 47 jne 0x79
32: 49 8d 7d 05 lea 0x5(%r13),%rdi
36: 48 89 f8 mov %rdi,%rax
39: 48 c1 e8 03 shr $0x3,%rax
3d: 0f .byte 0xf
3e: b6 04 mov $0x4,%dh
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: dc5c83b7f5f8 Linux 6.1.178
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1554e7b1580000
kernel config: https://syzkaller.appspot.com/x/.config?x=31dfefc4a14efea3
dashboard link: https://syzkaller.appspot.com/bug?extid=fc590201ba6fff657dbb
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/a9aa438e39c2/disk-dc5c83b7.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/a7b5afd2e170/vmlinux-dc5c83b7.xz
kernel image: https://storage.googleapis.com/syzbot-assets/3c7673d370fb/bzImage-dc5c83b7.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+fc5902...@syzkaller.appspotmail.com
emi26 - firmware loader 1-1:1.0: emi26_probe start
general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 PID: 4342 Comm: kworker/1:5 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x282/0x1610 drivers/usb/misc/emi26.c:232
Code: ff 89 de e8 30 fd 56 f7 85 db 0f 84 cc 01 00 00 e8 43 fa 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc90004086ee0 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000
RDX: ffffc9001ab42000 RSI: 0000000000014067 RDI: 0000000000000004
RBP: ffffc90004087020 R08: ffffffff90b0f2af R09: 1ffffffff2161e55
R10: dffffc0000000000 R11: fffffbfff2161e56 R12: fffffffffffffffa
R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f418d782ff8 CR3: 000000007ba33000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
usb_probe_interface+0x5be/0xae0 drivers/usb/core/driver.c:396
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x24a/0xb40 drivers/base/dd.c:638
__driver_probe_device+0x1f5/0x390 drivers/base/dd.c:804
driver_probe_device+0x4f/0x420 drivers/base/dd.c:834
__device_attach_driver+0x2c6/0x510 drivers/base/dd.c:962
bus_for_each_drv+0x184/0x210 drivers/base/bus.c:429
__device_attach+0x2a7/0x480 drivers/base/dd.c:1034
bus_probe_device+0xba/0x1d0 drivers/base/bus.c:489
device_add+0xbcf/0x1050 drivers/base/core.c:3712
usb_set_configuration+0x19d5/0x2030 drivers/usb/core/message.c:2223
usb_generic_driver_probe+0x89/0x150 drivers/usb/core/generic.c:238
usb_probe_device+0x126/0x250 drivers/usb/core/driver.c:293
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x24a/0xb40 drivers/base/dd.c:638
__driver_probe_device+0x1f5/0x390 drivers/base/dd.c:804
driver_probe_device+0x4f/0x420 drivers/base/dd.c:834
__device_attach_driver+0x2c6/0x510 drivers/base/dd.c:962
bus_for_each_drv+0x184/0x210 drivers/base/bus.c:429
__device_attach+0x2a7/0x480 drivers/base/dd.c:1034
bus_probe_device+0xba/0x1d0 drivers/base/bus.c:489
device_add+0xbcf/0x1050 drivers/base/core.c:3712
usb_new_device+0xa01/0x15e0 drivers/usb/core/hub.c:2659
hub_port_connect drivers/usb/core/hub.c:5517 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5657 [inline]
port_event drivers/usb/core/hub.c:5817 [inline]
hub_event+0x2b2f/0x5200 drivers/usb/core/hub.c:5899
process_one_work+0x8ab/0x1160 kernel/workqueue.c:2292
worker_thread+0xaf5/0x12a0 kernel/workqueue.c:2439
kthread+0x29d/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
</TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x282/0x1610 drivers/usb/misc/emi26.c:232
Code: ff 89 de e8 30 fd 56 f7 85 db 0f 84 cc 01 00 00 e8 43 fa 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc90004086ee0 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000
RDX: ffffc9001ab42000 RSI: 0000000000014067 RDI: 0000000000000004
RBP: ffffc90004087020 R08: ffffffff90b0f2af R09: 1ffffffff2161e55
R10: dffffc0000000000 R11: fffffbfff2161e56 R12: fffffffffffffffa
R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f07d8b4cfe8 CR3: 000000002730b000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: ff 89 de e8 30 fd decl -0x2cf1722(%rcx)
6: 56 push %rsi
7: f7 85 db 0f 84 cc 01 testl $0xe8000001,-0x337bf025(%rbp)
e: 00 00 e8
11: 43 fa rex.XB cli
13: 56 push %rsi
14: f7 48 bb 00 00 00 00 testl $0x0,-0x45(%rax)
1b: 00 fc add %bh,%ah
1d: ff lcall (bad)
1e: df 49 8d fisttps -0x73(%rcx)
21: 7d 04 jge 0x27
23: 48 89 f8 mov %rdi,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 0f b6 04 18 movzbl (%rax,%rbx,1),%eax <-- trapping instruction
2e: 84 c0 test %al,%al
30: 75 47 jne 0x79
32: 49 8d 7d 05 lea 0x5(%r13),%rdi
36: 48 89 f8 mov %rdi,%rax
39: 48 c1 e8 03 shr $0x3,%rax
3d: 0f .byte 0xf
3e: b6 04 mov $0x4,%dh
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot
Jul 28, 2026, 7:05:27 PM (6 days ago) Jul 28
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: c5596480c50e Linux 6.6.145
syzbot found the following issue on:
git tree: linux-6.6.y
console output: https://syzkaller.appspot.com/x/log.txt?x=11c951b9580000
kernel config: https://syzkaller.appspot.com/x/.config?x=f0bc3d90c30838b5
dashboard link: https://syzkaller.appspot.com/bug?extid=9687e58b2abb9b6ac6a8
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/eb5cda0a8020/disk-c5596480.raw.xz
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
vmlinux: https://storage.googleapis.com/syzbot-assets/ca05ff2fc502/vmlinux-c5596480.xz
kernel image: https://storage.googleapis.com/syzbot-assets/6daf3255b985/bzImage-c5596480.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
emi26 - firmware loader 3-1:1.0: emi26_probe start
general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x281/0x1660 drivers/usb/misc/emi26.c:232
Workqueue: usb_hub_wq hub_event
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
Code: ff 89 de e8 b1 91 ff f6 85 db 0f 84 d5 01 00 00 e8 84 8e ff f6 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc900001d6e60 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000
RDX: ffffc9001874c000 RSI: 00000000000253ce RDI: 0000000000000004
RBP: ffffc900001d6fa0 R08: ffffffff911eb577 R09: 1ffffffff223d6ae
R10: dffffc0000000000 R11: fffffbfff223d6af R12: fffffffffffffffa
R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c44b9d4 CR3: 0000000026347000 CR4: 00000000003506e0
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Call Trace:
<TASK>
usb_probe_interface+0x5c2/0xaf0 drivers/usb/core/driver.c:396
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x247/0xae0 drivers/base/dd.c:717
__driver_probe_device+0x1f5/0x390 drivers/base/dd.c:879
driver_probe_device+0x4f/0x420 drivers/base/dd.c:909
__device_attach_driver+0x2ca/0x510 drivers/base/dd.c:1037
bus_for_each_drv+0x252/0x2e0 drivers/base/bus.c:459
__device_attach+0x2c1/0x420 drivers/base/dd.c:1109
bus_probe_device+0x180/0x260 drivers/base/bus.c:580
device_add+0x87c/0xc40 drivers/base/core.c:3700
usb_set_configuration+0x1ad0/0x2150 drivers/usb/core/message.c:2265
usb_generic_driver_probe+0x8d/0x150 drivers/usb/core/generic.c:238
usb_probe_device+0x12a/0x260 drivers/usb/core/driver.c:293
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x247/0xae0 drivers/base/dd.c:717
__driver_probe_device+0x1f5/0x390 drivers/base/dd.c:879
driver_probe_device+0x4f/0x420 drivers/base/dd.c:909
__device_attach_driver+0x2ca/0x510 drivers/base/dd.c:1037
bus_for_each_drv+0x252/0x2e0 drivers/base/bus.c:459
__device_attach+0x2c1/0x420 drivers/base/dd.c:1109
bus_probe_device+0x180/0x260 drivers/base/bus.c:580
device_add+0x87c/0xc40 drivers/base/core.c:3700
usb_new_device+0x995/0x1550 drivers/usb/core/hub.c:2660
hub_port_connect drivers/usb/core/hub.c:5529 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5669 [inline]
port_event drivers/usb/core/hub.c:5833 [inline]
hub_event+0x29d5/0x4a80 drivers/usb/core/hub.c:5915
process_one_work kernel/workqueue.c:2653 [inline]
process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2730
worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2811
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
</TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x281/0x1660 drivers/usb/misc/emi26.c:232
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
Code: ff 89 de e8 b1 91 ff f6 85 db 0f 84 d5 01 00 00 e8 84 8e ff f6 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc900001d6e60 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000
RDX: ffffc9001874c000 RSI: 00000000000253ce RDI: 0000000000000004
RBP: ffffc900001d6fa0 R08: ffffffff911eb577 R09: 1ffffffff223d6ae
R10: dffffc0000000000 R11: fffffbfff223d6af R12: fffffffffffffffa
R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc187fed2f8 CR3: 000000001a6f9000 CR4: 00000000003506e0
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
----------------
Code disassembly (best guess):
0: ff 89 de e8 b1 91 decl -0x6e4e1722(%rcx)
Code disassembly (best guess):
6: ff f6 push %rsi
8: 85 db test %ebx,%ebx
a: 0f 84 d5 01 00 00 je 0x1e5
10: e8 84 8e ff f6 call 0xf6ff8e99
15: 48 bb 00 00 00 00 00 movabs $0xdffffc0000000000,%rbx
1c: fc ff df
1f: 49 8d 7e 04 lea 0x4(%r14),%rdi
23: 48 89 f8 mov %rdi,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 0f b6 04 18 movzbl (%rax,%rbx,1),%eax <-- trapping instruction
2e: 84 c0 test %al,%al
30: 75 47 jne 0x79
32: 49 8d 7e 05 lea 0x5(%r14),%rdi
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 0f b6 04 18 movzbl (%rax,%rbx,1),%eax <-- trapping instruction
2e: 84 c0 test %al,%al
30: 75 47 jne 0x79
syzbot
Aug 2, 2026, 8:24:36 AM (yesterday) Aug 2
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: fb28aa725e05 Linux 6.1.180
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=15b6f4c6580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1771ac9e580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/9a6fe2a54d0f/disk-fb28aa72.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/742b23a1d931/vmlinux-fb28aa72.xz
kernel image: https://storage.googleapis.com/syzbot-assets/b3f257c16d2e/bzImage-fb28aa72.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+fc5902...@syzkaller.appspotmail.com
usb 4-1: Product: syz
usb 4-1: Manufacturer: syz
usb 4-1: SerialNumber: syz
emi26 - firmware loader 4-1:1.0: emi26_probe start
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RSP: 0018:ffffc90003fd6ee0 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888026e61e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: ffffc90003fd7020 R08: ffffffff90b102af R09: 1ffffffff2162055
R10: dffffc0000000000 R11: fffffbfff2162056 R12: fffffffffffffffa
Code: ff 89 de e8 60 f7 56 f7 85 db 0f 84 cc 01 00 00 e8 73 f4 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc90003fd6ee0 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888026e61e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: ffffc90003fd7020 R08: ffffffff90b102af R09: 1ffffffff2162055
R10: dffffc0000000000 R11: fffffbfff2162056 R12: fffffffffffffffa
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
HEAD commit: fb28aa725e05 Linux 6.1.180
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=15b6f4c6580000
kernel config: https://syzkaller.appspot.com/x/.config?x=31dfefc4a14efea3
dashboard link: https://syzkaller.appspot.com/bug?extid=fc590201ba6fff657dbb
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=103fedb9580000
dashboard link: https://syzkaller.appspot.com/bug?extid=fc590201ba6fff657dbb
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1771ac9e580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/9a6fe2a54d0f/disk-fb28aa72.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/742b23a1d931/vmlinux-fb28aa72.xz
kernel image: https://storage.googleapis.com/syzbot-assets/b3f257c16d2e/bzImage-fb28aa72.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+fc5902...@syzkaller.appspotmail.com
usb 4-1: Manufacturer: syz
usb 4-1: SerialNumber: syz
emi26 - firmware loader 4-1:1.0: emi26_probe start
general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 PID: 4350 Comm: kworker/1:7 Not tainted syzkaller #0
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x282/0x1610 drivers/usb/misc/emi26.c:232
Code: ff 89 de e8 60 f7 56 f7 85 db 0f 84 cc 01 00 00 e8 73 f4 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x282/0x1610 drivers/usb/misc/emi26.c:232
RSP: 0018:ffffc90003fd6ee0 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888026e61e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: ffffc90003fd7020 R08: ffffffff90b102af R09: 1ffffffff2162055
R10: dffffc0000000000 R11: fffffbfff2162056 R12: fffffffffffffffa
R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000007e55d88d000 CR3: 000000001e6a1000 CR4: 00000000003506e0
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
RSP: 0018:ffffc90003fd6ee0 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888026e61e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: ffffc90003fd7020 R08: ffffffff90b102af R09: 1ffffffff2162055
R10: dffffc0000000000 R11: fffffbfff2162056 R12: fffffffffffffffa
R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000007e55d835000 CR3: 0000000018281000 CR4: 00000000003506e0
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: ff 89 de e8 60 f7 decl -0x89f1722(%rcx)
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
6: 56 push %rsi
7: f7 85 db 0f 84 cc 01 testl $0xe8000001,-0x337bf025(%rbp)
e: 00 00 e8
11: 73 f4 jae 0x7
7: f7 85 db 0f 84 cc 01 testl $0xe8000001,-0x337bf025(%rbp)
e: 00 00 e8
13: 56 push %rsi
14: f7 48 bb 00 00 00 00 testl $0x0,-0x45(%rax)
1b: 00 fc add %bh,%ah
1d: ff lcall (bad)
1e: df 49 8d fisttps -0x73(%rcx)
21: 7d 04 jge 0x27
23: 48 89 f8 mov %rdi,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 0f b6 04 18 movzbl (%rax,%rbx,1),%eax <-- trapping instruction
2e: 84 c0 test %al,%al
30: 75 47 jne 0x79
32: 49 8d 7d 05 lea 0x5(%r13),%rdi
36: 48 89 f8 mov %rdi,%rax
39: 48 c1 e8 03 shr $0x3,%rax
3d: 0f .byte 0xf
3e: b6 04 mov $0x4,%dh
---
If you want syzbot to run the reproducer, reply with:
14: f7 48 bb 00 00 00 00 testl $0x0,-0x45(%rax)
1b: 00 fc add %bh,%ah
1d: ff lcall (bad)
1e: df 49 8d fisttps -0x73(%rcx)
21: 7d 04 jge 0x27
23: 48 89 f8 mov %rdi,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 0f b6 04 18 movzbl (%rax,%rbx,1),%eax <-- trapping instruction
2e: 84 c0 test %al,%al
30: 75 47 jne 0x79
32: 49 8d 7d 05 lea 0x5(%r13),%rdi
36: 48 89 f8 mov %rdi,%rax
39: 48 c1 e8 03 shr $0x3,%rax
3d: 0f .byte 0xf
3e: b6 04 mov $0x4,%dh
---
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
syzbot
Aug 2, 2026, 9:37:23 AM (24 hours ago) Aug 2
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 6e2fd6534337 Linux 5.15.213
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=167315b9580000
kernel config: https://syzkaller.appspot.com/x/.config?x=f161cbc9aef65db0
dashboard link: https://syzkaller.appspot.com/bug?extid=be8b2dc9bd1a8cb974bb
disk image: https://storage.googleapis.com/syzbot-assets/d7b46606b13d/disk-6e2fd653.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/da120fdeb081/vmlinux-6e2fd653.xz
kernel image: https://storage.googleapis.com/syzbot-assets/3c2643457e3f/bzImage-6e2fd653.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+be8b2d...@syzkaller.appspotmail.com
usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
Code: ff 89 de e8 73 cd bd f7 85 db 0f 84 cc 01 00 00 e8 86 ca bd f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7f 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7f 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc900033cef00 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000
RDX: ffffc90013f59000 RSI: 0000000000014c0f RDI: 0000000000000004
RBP: ffffc900033cf030 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 1fffffffffffffff
R13: fffffffffffffffa R14: 1fffffffffffffff R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
__driver_probe_device+0x1f5/0x390 drivers/base/dd.c:775
driver_probe_device+0x4f/0x420 drivers/base/dd.c:805
__device_attach_driver+0x2b0/0x500 drivers/base/dd.c:927
bus_for_each_drv+0x184/0x210 drivers/base/bus.c:429
__device_attach+0x2a7/0x480 drivers/base/dd.c:999
bus_probe_device+0xba/0x1d0 drivers/base/bus.c:489
device_add+0xbcf/0x1050 drivers/base/core.c:3427
__driver_probe_device+0x1f5/0x390 drivers/base/dd.c:775
driver_probe_device+0x4f/0x420 drivers/base/dd.c:805
__device_attach_driver+0x2b0/0x500 drivers/base/dd.c:927
bus_for_each_drv+0x184/0x210 drivers/base/bus.c:429
__device_attach+0x2a7/0x480 drivers/base/dd.c:999
bus_probe_device+0xba/0x1d0 drivers/base/bus.c:489
device_add+0xbcf/0x1050 drivers/base/core.c:3427
usb_new_device+0x9f6/0x15d0 drivers/usb/core/hub.c:2632
hub_port_connect drivers/usb/core/hub.c:5497 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5637 [inline]
port_event drivers/usb/core/hub.c:5799 [inline]
hub_event+0x2b8d/0x5260 drivers/usb/core/hub.c:5881
process_one_work+0x867/0xff0 kernel/workqueue.c:2310
worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
kthread+0x42e/0x520 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
</TASK>
Modules linked in:
---[ end trace c27be6e73c37659b ]---
Code: ff 89 de e8 73 cd bd f7 85 db 0f 84 cc 01 00 00 e8 86 ca bd f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7f 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7f 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc900033cef00 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000
RDX: ffffc90013f59000 RSI: 0000000000014c0f RDI: 0000000000000004
RBP: ffffc900033cf030 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 1fffffffffffffff
R13: fffffffffffffffa R14: 1fffffffffffffff R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
6: bd f7 85 db 0f mov $0xfdb85f7,%ebp
b: 84 cc test %cl,%ah
d: 01 00 add %eax,(%rax)
f: 00 e8 add %ch,%al
11: 86 ca xchg %cl,%dl
13: bd f7 48 bb 00 mov $0xbb48f7,%ebp
18: 00 00 add %al,(%rax)
1a: 00 00 add %al,(%rax)
1c: fc cld
syzbot found the following issue on:
HEAD commit: 6e2fd6534337 Linux 5.15.213
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=167315b9580000
kernel config: https://syzkaller.appspot.com/x/.config?x=f161cbc9aef65db0
dashboard link: https://syzkaller.appspot.com/bug?extid=be8b2dc9bd1a8cb974bb
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/d7b46606b13d/disk-6e2fd653.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/da120fdeb081/vmlinux-6e2fd653.xz
kernel image: https://storage.googleapis.com/syzbot-assets/3c2643457e3f/bzImage-6e2fd653.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
emi26 - firmware loader 4-1:1.0: emi26_probe start
general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 0 PID: 4647 Comm: kworker/0:19 Not tainted syzkaller #0
general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x27f/0x1740 drivers/usb/misc/emi26.c:232
Workqueue: usb_hub_wq hub_event
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
Code: ff 89 de e8 73 cd bd f7 85 db 0f 84 cc 01 00 00 e8 86 ca bd f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7f 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7f 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc900033cef00 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000
RDX: ffffc90013f59000 RSI: 0000000000014c0f RDI: 0000000000000004
RBP: ffffc900033cf030 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 1fffffffffffffff
R13: fffffffffffffffa R14: 1fffffffffffffff R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558204cf2660 CR3: 0000000076cd5000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
usb_probe_interface+0x5be/0xae0 drivers/usb/core/driver.c:396
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x276/0xc70 drivers/base/dd.c:595
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
usb_probe_interface+0x5be/0xae0 drivers/usb/core/driver.c:396
call_driver_probe drivers/base/dd.c:-1 [inline]
__driver_probe_device+0x1f5/0x390 drivers/base/dd.c:775
driver_probe_device+0x4f/0x420 drivers/base/dd.c:805
__device_attach_driver+0x2b0/0x500 drivers/base/dd.c:927
bus_for_each_drv+0x184/0x210 drivers/base/bus.c:429
__device_attach+0x2a7/0x480 drivers/base/dd.c:999
bus_probe_device+0xba/0x1d0 drivers/base/bus.c:489
device_add+0xbcf/0x1050 drivers/base/core.c:3427
usb_set_configuration+0x19d5/0x2030 drivers/usb/core/message.c:2223
usb_generic_driver_probe+0x89/0x150 drivers/usb/core/generic.c:238
usb_probe_device+0x126/0x250 drivers/usb/core/driver.c:293
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x276/0xc70 drivers/base/dd.c:595
usb_generic_driver_probe+0x89/0x150 drivers/usb/core/generic.c:238
usb_probe_device+0x126/0x250 drivers/usb/core/driver.c:293
call_driver_probe drivers/base/dd.c:-1 [inline]
__driver_probe_device+0x1f5/0x390 drivers/base/dd.c:775
driver_probe_device+0x4f/0x420 drivers/base/dd.c:805
__device_attach_driver+0x2b0/0x500 drivers/base/dd.c:927
bus_for_each_drv+0x184/0x210 drivers/base/bus.c:429
__device_attach+0x2a7/0x480 drivers/base/dd.c:999
bus_probe_device+0xba/0x1d0 drivers/base/bus.c:489
device_add+0xbcf/0x1050 drivers/base/core.c:3427
usb_new_device+0x9f6/0x15d0 drivers/usb/core/hub.c:2632
hub_port_connect drivers/usb/core/hub.c:5497 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5637 [inline]
port_event drivers/usb/core/hub.c:5799 [inline]
hub_event+0x2b8d/0x5260 drivers/usb/core/hub.c:5881
process_one_work+0x867/0xff0 kernel/workqueue.c:2310
worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
kthread+0x42e/0x520 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
</TASK>
Modules linked in:
---[ end trace c27be6e73c37659b ]---
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x27f/0x1740 drivers/usb/misc/emi26.c:232
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
Code: ff 89 de e8 73 cd bd f7 85 db 0f 84 cc 01 00 00 e8 86 ca bd f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7f 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7f 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc900033cef00 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000
RDX: ffffc90013f59000 RSI: 0000000000014c0f RDI: 0000000000000004
RBP: ffffc900033cf030 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 1fffffffffffffff
R13: fffffffffffffffa R14: 1fffffffffffffff R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0e31a82ff8 CR3: 000000002ae8e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: ff 89 de e8 73 cd decl -0x328c1722(%rcx)
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
6: bd f7 85 db 0f mov $0xfdb85f7,%ebp
b: 84 cc test %cl,%ah
d: 01 00 add %eax,(%rax)
f: 00 e8 add %ch,%al
11: 86 ca xchg %cl,%dl
13: bd f7 48 bb 00 mov $0xbb48f7,%ebp
18: 00 00 add %al,(%rax)
1a: 00 00 add %al,(%rax)
1c: fc cld
1d: ff lcall (bad)
1e: df 49 8d fisttps -0x73(%rcx)
21: 7f 04 jg 0x27
1e: df 49 8d fisttps -0x73(%rcx)
23: 48 89 f8 mov %rdi,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 0f b6 04 18 movzbl (%rax,%rbx,1),%eax <-- trapping instruction
2e: 84 c0 test %al,%al
30: 75 47 jne 0x79
32: 49 8d 7f 05 lea 0x5(%r15),%rdi
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 0f b6 04 18 movzbl (%rax,%rbx,1),%eax <-- trapping instruction
2e: 84 c0 test %al,%al
30: 75 47 jne 0x79
36: 48 89 f8 mov %rdi,%rax
39: 48 c1 e8 03 shr $0x3,%rax
3d: 0f .byte 0xf
3e: b6 04 mov $0x4,%dh
---
39: 48 c1 e8 03 shr $0x3,%rax
3d: 0f .byte 0xf
3e: b6 04 mov $0x4,%dh
---
syzbot
Aug 2, 2026, 10:45:34 AM (23 hours ago) Aug 2
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 6e2fd6534337 Linux 5.15.213
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=10374649580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14374649580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/d7b46606b13d/disk-6e2fd653.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/da120fdeb081/vmlinux-6e2fd653.xz
kernel image: https://storage.googleapis.com/syzbot-assets/3c2643457e3f/bzImage-6e2fd653.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+be8b2d...@syzkaller.appspotmail.com
emi26 - firmware loader 1-1:1.0: emi26_probe start
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880219c0000
---[ end trace 2894b3db8f584bed ]---
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880219c0000
HEAD commit: 6e2fd6534337 Linux 5.15.213
git tree: linux-5.15.y
kernel config: https://syzkaller.appspot.com/x/.config?x=f161cbc9aef65db0
dashboard link: https://syzkaller.appspot.com/bug?extid=be8b2dc9bd1a8cb974bb
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=16f41db9580000
dashboard link: https://syzkaller.appspot.com/bug?extid=be8b2dc9bd1a8cb974bb
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14374649580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/d7b46606b13d/disk-6e2fd653.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/da120fdeb081/vmlinux-6e2fd653.xz
kernel image: https://storage.googleapis.com/syzbot-assets/3c2643457e3f/bzImage-6e2fd653.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+be8b2d...@syzkaller.appspotmail.com
general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 PID: 1107 Comm: kworker/1:2 Not tainted syzkaller #0
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x27f/0x1740 drivers/usb/misc/emi26.c:232
Code: ff 89 de e8 73 cd bd f7 85 db 0f 84 cc 01 00 00 e8 86 ca bd f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7f 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7f 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc90005086f00 EFLAGS: 00010247
Workqueue: usb_hub_wq hub_event
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x27f/0x1740 drivers/usb/misc/emi26.c:232
Code: ff 89 de e8 73 cd bd f7 85 db 0f 84 cc 01 00 00 e8 86 ca bd f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7f 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7f 05 48 89 f8 48 c1 e8 03 0f b6 04
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880219c0000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: ffffc90005087030 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 1fffffffffffffff
R13: fffffffffffffffa R14: 1fffffffffffffff R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
R13: fffffffffffffffa R14: 1fffffffffffffff R15: 0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f88ce4fe700 CR3: 000000007b59a000 CR4: 00000000003506e0
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x27f/0x1740 drivers/usb/misc/emi26.c:232
Code: ff 89 de e8 73 cd bd f7 85 db 0f 84 cc 01 00 00 e8 86 ca bd f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7f 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7f 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc90005086f00 EFLAGS: 00010247
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x27f/0x1740 drivers/usb/misc/emi26.c:232
Code: ff 89 de e8 73 cd bd f7 85 db 0f 84 cc 01 00 00 e8 86 ca bd f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7f 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7f 05 48 89 f8 48 c1 e8 03 0f b6 04
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880219c0000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: ffffc90005087030 R08: ffffffff901ee137 R09: 1ffffffff203dc26
R10: dffffc0000000000 R11: fffffbfff203dc27 R12: 1fffffffffffffff
R13: fffffffffffffffa R14: 1fffffffffffffff R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
R13: fffffffffffffffa R14: 1fffffffffffffff R15: 0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555579328a38 CR3: 000000002acbe000 CR4: 00000000003506e0
syzbot
Aug 2, 2026, 5:26:36 PM (16 hours ago) Aug 2
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: a1153c0deb44 Linux 6.6.147
git tree: linux-6.6.y
console output: https://syzkaller.appspot.com/x/log.txt?x=149683b9580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/9f646bfa1b52/disk-a1153c0d.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/a2aec2e8f0fd/vmlinux-a1153c0d.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a7abe1f87405/bzImage-a1153c0d.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+9687e5...@syzkaller.appspotmail.com
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RSP: 0018:ffffc9000377ee60 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802166da00
Code: ff 89 de e8 01 9c ff f6 85 db 0f 84 d5 01 00 00 e8 d4 98 ff f6 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04
RSP: 0018:ffffc9000377ee60 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802166da00
HEAD commit: a1153c0deb44 Linux 6.6.147
git tree: linux-6.6.y
console output: https://syzkaller.appspot.com/x/log.txt?x=149683b9580000
kernel config: https://syzkaller.appspot.com/x/.config?x=f0bc3d90c30838b5
dashboard link: https://syzkaller.appspot.com/bug?extid=9687e58b2abb9b6ac6a8
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10dd9e32580000
dashboard link: https://syzkaller.appspot.com/bug?extid=9687e58b2abb9b6ac6a8
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/9f646bfa1b52/disk-a1153c0d.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/a2aec2e8f0fd/vmlinux-a1153c0d.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a7abe1f87405/bzImage-a1153c0d.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+9687e5...@syzkaller.appspotmail.com
general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 PID: 790 Comm: kworker/1:2 Not tainted syzkaller #0
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x281/0x1660 drivers/usb/misc/emi26.c:232
Code: ff 89 de e8 01 9c ff f6 85 db 0f 84 d5 01 00 00 e8 d4 98 ff f6 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04
RIP: 0010:ihex_binrec_size include/linux/ihex.h:26 [inline]
RIP: 0010:__ihex_next_binrec include/linux/ihex.h:35 [inline]
RIP: 0010:ihex_validate_fw include/linux/ihex.h:54 [inline]
RIP: 0010:request_ihex_firmware include/linux/ihex.h:74 [inline]
RIP: 0010:emi26_load_firmware drivers/usb/misc/emi26.c:86 [inline]
RIP: 0010:emi26_probe+0x281/0x1660 drivers/usb/misc/emi26.c:232
RSP: 0018:ffffc9000377ee60 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802166da00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: ffffc9000377efa0 R08: ffffffff911eb577 R09: 1ffffffff223d6ae
R10: dffffc0000000000 R11: fffffbfff223d6af R12: fffffffffffffffa
R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f801c7eb700 CR3: 000000002f409000 CR4: 00000000003506e0
R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
RSP: 0018:ffffc9000377ee60 EFLAGS: 00010247
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802166da00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: ffffc9000377efa0 R08: ffffffff911eb577 R09: 1ffffffff223d6ae
R10: dffffc0000000000 R11: fffffbfff223d6af R12: fffffffffffffffa
R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f801c7eb700 CR3: 0000000018ef8000 CR4: 00000000003506e0
R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
----------------
Code disassembly (best guess):
0: ff 89 de e8 01 9c decl -0x63fe1722(%rcx)
Code disassembly (best guess):
6: ff f6 push %rsi
8: 85 db test %ebx,%ebx
a: 0f 84 d5 01 00 00 je 0x1e5
10: e8 d4 98 ff f6 call 0xf6ff98e9
8: 85 db test %ebx,%ebx
a: 0f 84 d5 01 00 00 je 0x1e5
15: 48 bb 00 00 00 00 00 movabs $0xdffffc0000000000,%rbx
1c: fc ff df
1f: 49 8d 7e 04 lea 0x4(%r14),%rdi
23: 48 89 f8 mov %rdi,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 0f b6 04 18 movzbl (%rax,%rbx,1),%eax <-- trapping instruction
2e: 84 c0 test %al,%al
30: 75 47 jne 0x79
32: 49 8d 7e 05 lea 0x5(%r14),%rdi
36: 48 89 f8 mov %rdi,%rax
39: 48 c1 e8 03 shr $0x3,%rax
3d: 0f .byte 0xf
3e: b6 04 mov $0x4,%dh
---
1c: fc ff df
1f: 49 8d 7e 04 lea 0x4(%r14),%rdi
23: 48 89 f8 mov %rdi,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 0f b6 04 18 movzbl (%rax,%rbx,1),%eax <-- trapping instruction
2e: 84 c0 test %al,%al
30: 75 47 jne 0x79
32: 49 8d 7e 05 lea 0x5(%r14),%rdi
36: 48 89 f8 mov %rdi,%rax
39: 48 c1 e8 03 shr $0x3,%rax
3d: 0f .byte 0xf
3e: b6 04 mov $0x4,%dh
---
Reply all
Reply to author
Forward
0 new messages