Extracting prog: 2m59.878271006s Minimizing prog: 21m40.640409272s Simplifying prog options: 0s Extracting C: 1m2.828265285s Simplifying C: 23m27.584890361s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1e, &(0x7f0000000080)="830600004a5e00000059bb04e01cd9141100000000ff0000000000000000") program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1e, &(0x7f0000000080)="830600004a5e00000059bb04e01cd9141100000000ff0000000000000000") program crashed: KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid single: successfully extracted reproducer found reproducer with 5 syscalls minimizing guilty program testing program (duration=1m27.688856392s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) program did not crash testing program (duration=1m27.688856392s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1e, &(0x7f0000000080)="830600004a5e00000059bb04e01cd9141100000000ff0000000000000000") program did not crash testing program (duration=1m27.688856392s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1e, &(0x7f0000000080)="830600004a5e00000059bb04e01cd9141100000000ff0000000000000000") program did not crash testing program (duration=1m27.688856392s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1e, &(0x7f0000000080)="830600004a5e00000059bb04e01cd9141100000000ff0000000000000000") program did not crash testing program (duration=1m27.688856392s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1e, &(0x7f0000000080)="830600004a5e00000059bb04e01cd9141100000000ff0000000000000000") program did not crash testing program (duration=1m27.688856392s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1e, &(0x7f0000000080)="830600004a5e00000059bb04e01cd9141100000000ff0000000000000000") program did not crash testing program (duration=1m27.688856392s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1e, &(0x7f0000000080)="830600004a5e00000059bb04e01cd9141100000000ff0000000000000000") program did not crash testing program (duration=1m27.688856392s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1e, &(0x7f0000000080)="830600004a5e00000059bb04e01cd9141100000000ff0000000000000000") program did not crash testing program (duration=1m27.688856392s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program did not crash testing program (duration=1m27.688856392s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000080)) program did not crash extracting C reproducer testing compiled C program (duration=1m27.688856392s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid simplifying C reproducer testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: KASAN: slab-use-after-free Read in pn533_acr122_is_rx_frame_valid a never seen crash title: KASAN: slab-use-after-free Read in pn533_acr122_is_rx_frame_valid, ignore testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid a never seen crash title: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid, ignore testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: KASAN: slab-use-after-free Read in pn533_acr122_is_rx_frame_valid a never seen crash title: KASAN: slab-use-after-free Read in pn533_acr122_is_rx_frame_valid, ignore testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: KASAN: slab-use-after-free Read in pn533_acr122_is_rx_frame_valid a never seen crash title: KASAN: slab-use-after-free Read in pn533_acr122_is_rx_frame_valid, ignore testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid a never seen crash title: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid, ignore testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid a never seen crash title: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid, ignore testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid a never seen crash title: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid, ignore testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid a never seen crash title: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid, ignore testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: KASAN: slab-use-after-free Read in pn533_acr122_is_rx_frame_valid a never seen crash title: KASAN: slab-use-after-free Read in pn533_acr122_is_rx_frame_valid, ignore testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid a never seen crash title: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid, ignore testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid a never seen crash title: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid, ignore testing compiled C program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write program crashed: KASAN: slab-use-after-free Read in pn533_acr122_is_rx_frame_valid a never seen crash title: KASAN: slab-use-after-free Read in pn533_acr122_is_rx_frame_valid, ignore testing program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1e, &(0x7f0000000080)="830600004a5e00000059bb04e01cd9141100000000ff0000000000000000") program crashed: KASAN: slab-out-of-bounds Read in pn533_acr122_is_rx_frame_valid validation run: crashed=true testing program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1e, &(0x7f0000000080)="830600004a5e00000059bb04e01cd9141100000000ff0000000000000000") program crashed: KASAN: slab-out-of-bounds Read in pn533_acr122_is_rx_frame_valid validation run: crashed=true testing program (duration=1m27.688856392s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_ep_read-syz_usb_ep_write-syz_usb_ep_read-syz_usb_ep_write detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1e, &(0x7f0000000080)="830600004a5e00000059bb04e01cd9141100000000ff0000000000000000") program crashed: BUG: unable to handle kernel paging request in pn533_acr122_is_rx_frame_valid validation run: crashed=true reproducing took 53m55.63207151s repro crashed as (corrupted=false): BUG: unable to handle page fault for address: ffffed1018750ee9 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 23fff6067 P4D 23fff6067 PUD 13fffa067 PMD 0 Oops: Oops: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:pn533_acr122_is_rx_frame_valid+0xa2/0x160 drivers/nfc/pn533/usb.c:325 Code: 00 45 8b 36 31 ff 44 89 f6 e8 9a 01 7a fb 45 85 f6 74 42 e8 90 fc 79 fb 41 83 c6 fe 4c 01 f3 48 83 c3 0a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 8d 00 00 00 0f b6 33 83 fe 63 0f 95 c3 RSP: 0000:ffffc90000007a58 EFLAGS: 00010803 RAX: 1ffff11018750ee9 RBX: ffff8880c3a8774e RCX: ffffffff8ea8efc0 RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: 0000000000000083 R08: 0000000000000100 R09: 14d91ce004bb5900 R10: ff000000001114d9 R11: ffffffff864dcd70 R12: dffffc0000000000 R13: dffffc0000000000 R14: 000000004a000004 R15: ffff888079a87744 FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed1018750ee9 CR3: 0000000036264000 CR4: 00000000003526f0 Call Trace: pn533_recv_frame+0x1c0/0x6d0 drivers/nfc/pn533/pn533.c:2203 __usb_hcd_giveback_urb+0x378/0x540 drivers/usb/core/hcd.c:1657 dummy_timer+0xa91/0x4cf0 drivers/usb/gadget/udc/dummy_hcd.c:2019 __run_hrtimer kernel/time/hrtimer.c:2067 [inline] __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2124 hrtimer_run_softirq+0x1e3/0x2e0 kernel/time/hrtimer.c:2141 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 9c 8f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 91 24 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0000:ffffffff8ea07ca0 EFLAGS: 00000246 RAX: 00000000000b8f99 RBX: ffffffff819baed0 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e475f59 RDI: ffffffff8c6d9a80 RBP: ffffffff8ea07d78 R08: ffff8880b8633a1b R09: 1ffff110170c6743 R10: dffffc0000000000 R11: ffffed10170c6744 R12: 0000000000000000 R13: 1ffffffff1d51df8 R14: 1ffffffff1d40f9c R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:727 start_kernel+0x392/0x3e0 init/main.c:1185 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 Modules linked in: CR2: ffffed1018750ee9 ---[ end trace 0000000000000000 ]--- RIP: 0010:pn533_acr122_is_rx_frame_valid+0xa2/0x160 drivers/nfc/pn533/usb.c:325 Code: 00 45 8b 36 31 ff 44 89 f6 e8 9a 01 7a fb 45 85 f6 74 42 e8 90 fc 79 fb 41 83 c6 fe 4c 01 f3 48 83 c3 0a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 8d 00 00 00 0f b6 33 83 fe 63 0f 95 c3 RSP: 0000:ffffc90000007a58 EFLAGS: 00010803 RAX: 1ffff11018750ee9 RBX: ffff8880c3a8774e RCX: ffffffff8ea8efc0 RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: 0000000000000083 R08: 0000000000000100 R09: 14d91ce004bb5900 R10: ff000000001114d9 R11: ffffffff864dcd70 R12: dffffc0000000000 R13: dffffc0000000000 R14: 000000004a000004 R15: ffff888079a87744 FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed1018750ee9 CR3: 0000000036264000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: 00 45 8b add %al,-0x75(%rbp) 3: 36 31 ff ss xor %edi,%edi 6: 44 89 f6 mov %r14d,%esi 9: e8 9a 01 7a fb call 0xfb7a01a8 e: 45 85 f6 test %r14d,%r14d 11: 74 42 je 0x55 13: e8 90 fc 79 fb call 0xfb79fca8 18: 41 83 c6 fe add $0xfffffffe,%r14d 1c: 4c 01 f3 add %r14,%rbx 1f: 48 83 c3 0a add $0xa,%rbx 23: 48 89 d8 mov %rbx,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 0f b6 04 20 movzbl (%rax,%r12,1),%eax <-- trapping instruction 2f: 84 c0 test %al,%al 31: 0f 85 8d 00 00 00 jne 0xc4 37: 0f b6 33 movzbl (%rbx),%esi 3a: 83 fe 63 cmp $0x63,%esi 3d: 0f 95 c3 setne %bl final repro crashed as (corrupted=false): BUG: unable to handle page fault for address: ffffed1018750ee9 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 23fff6067 P4D 23fff6067 PUD 13fffa067 PMD 0 Oops: Oops: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:pn533_acr122_is_rx_frame_valid+0xa2/0x160 drivers/nfc/pn533/usb.c:325 Code: 00 45 8b 36 31 ff 44 89 f6 e8 9a 01 7a fb 45 85 f6 74 42 e8 90 fc 79 fb 41 83 c6 fe 4c 01 f3 48 83 c3 0a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 8d 00 00 00 0f b6 33 83 fe 63 0f 95 c3 RSP: 0000:ffffc90000007a58 EFLAGS: 00010803 RAX: 1ffff11018750ee9 RBX: ffff8880c3a8774e RCX: ffffffff8ea8efc0 RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: 0000000000000083 R08: 0000000000000100 R09: 14d91ce004bb5900 R10: ff000000001114d9 R11: ffffffff864dcd70 R12: dffffc0000000000 R13: dffffc0000000000 R14: 000000004a000004 R15: ffff888079a87744 FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed1018750ee9 CR3: 0000000036264000 CR4: 00000000003526f0 Call Trace: pn533_recv_frame+0x1c0/0x6d0 drivers/nfc/pn533/pn533.c:2203 __usb_hcd_giveback_urb+0x378/0x540 drivers/usb/core/hcd.c:1657 dummy_timer+0xa91/0x4cf0 drivers/usb/gadget/udc/dummy_hcd.c:2019 __run_hrtimer kernel/time/hrtimer.c:2067 [inline] __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2124 hrtimer_run_softirq+0x1e3/0x2e0 kernel/time/hrtimer.c:2141 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 9c 8f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 91 24 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0000:ffffffff8ea07ca0 EFLAGS: 00000246 RAX: 00000000000b8f99 RBX: ffffffff819baed0 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e475f59 RDI: ffffffff8c6d9a80 RBP: ffffffff8ea07d78 R08: ffff8880b8633a1b R09: 1ffff110170c6743 R10: dffffc0000000000 R11: ffffed10170c6744 R12: 0000000000000000 R13: 1ffffffff1d51df8 R14: 1ffffffff1d40f9c R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:727 start_kernel+0x392/0x3e0 init/main.c:1185 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 Modules linked in: CR2: ffffed1018750ee9 ---[ end trace 0000000000000000 ]--- RIP: 0010:pn533_acr122_is_rx_frame_valid+0xa2/0x160 drivers/nfc/pn533/usb.c:325 Code: 00 45 8b 36 31 ff 44 89 f6 e8 9a 01 7a fb 45 85 f6 74 42 e8 90 fc 79 fb 41 83 c6 fe 4c 01 f3 48 83 c3 0a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 8d 00 00 00 0f b6 33 83 fe 63 0f 95 c3 RSP: 0000:ffffc90000007a58 EFLAGS: 00010803 RAX: 1ffff11018750ee9 RBX: ffff8880c3a8774e RCX: ffffffff8ea8efc0 RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: 0000000000000083 R08: 0000000000000100 R09: 14d91ce004bb5900 R10: ff000000001114d9 R11: ffffffff864dcd70 R12: dffffc0000000000 R13: dffffc0000000000 R14: 000000004a000004 R15: ffff888079a87744 FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed1018750ee9 CR3: 0000000036264000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: 00 45 8b add %al,-0x75(%rbp) 3: 36 31 ff ss xor %edi,%edi 6: 44 89 f6 mov %r14d,%esi 9: e8 9a 01 7a fb call 0xfb7a01a8 e: 45 85 f6 test %r14d,%r14d 11: 74 42 je 0x55 13: e8 90 fc 79 fb call 0xfb79fca8 18: 41 83 c6 fe add $0xfffffffe,%r14d 1c: 4c 01 f3 add %r14,%rbx 1f: 48 83 c3 0a add $0xa,%rbx 23: 48 89 d8 mov %rbx,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 0f b6 04 20 movzbl (%rax,%r12,1),%eax <-- trapping instruction 2f: 84 c0 test %al,%al 31: 0f 85 8d 00 00 00 jne 0xc4 37: 0f b6 33 movzbl (%rbx),%esi 3a: 83 fe 63 cmp $0x63,%esi 3d: 0f 95 c3 setne %bl