------------[ cut here ]------------ ====================================================== WARNING: possible circular locking dependency detected 5.15.158-syzkaller #0 Not tainted ------------------------------------------------------ swapper/1/0 is trying to acquire lock: ffffffff8c914660 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 kernel/printk/printk.c:1802 but task is already holding lock: ffff8880b9b28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 kernel/time/timer.c:946 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #5 (&base->lock){-.-.}-{2:2}: lock_acquire+0x1db/0x4f0 kernel/locking/lockdep.c:5623 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 lock_timer_base+0x120/0x260 kernel/time/timer.c:946 __mod_timer+0x1d6/0xeb0 kernel/time/timer.c:1019 queue_delayed_work_on+0x156/0x250 kernel/workqueue.c:1715 psi_enqueue kernel/sched/stats.h:104 [inline] enqueue_task+0x2fe/0x3a0 kernel/sched/core.c:1973 activate_task kernel/sched/core.c:2005 [inline] wake_up_new_task+0x515/0xb60 kernel/sched/core.c:4522 kernel_clone+0x44e/0x960 kernel/fork.c:2628 kernel_thread+0x168/0x1e0 kernel/fork.c:2656 rest_init+0x21/0x330 init/main.c:706 start_kernel+0x48c/0x540 init/main.c:1140 secondary_startup_64_no_verify+0xb1/0xbb -> #4 (&rq->__lock){-.-.}-{2:2}: lock_acquire+0x1db/0x4f0 kernel/locking/lockdep.c:5623 _raw_spin_lock_nested+0x2d/0x40 kernel/locking/spinlock.c:368 raw_spin_rq_lock_nested+0x26/0x140 kernel/sched/core.c:475 raw_spin_rq_lock kernel/sched/sched.h:1326 [inline] rq_lock kernel/sched/sched.h:1621 [inline] task_fork_fair+0x5d/0x350 kernel/sched/fair.c:11480 sched_cgroup_fork+0x2d3/0x330 kernel/sched/core.c:4466 copy_process+0x224a/0x3ef0 kernel/fork.c:2320 kernel_clone+0x210/0x960 kernel/fork.c:2604 kernel_thread+0x168/0x1e0 kernel/fork.c:2656 rest_init+0x21/0x330 init/main.c:706 start_kernel+0x48c/0x540 init/main.c:1140 secondary_startup_64_no_verify+0xb1/0xbb -> #3 (&p->pi_lock){-.-.}-{2:2}: lock_acquire+0x1db/0x4f0 kernel/locking/lockdep.c:5623 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 try_to_wake_up+0xae/0x1300 kernel/sched/core.c:4030 __wake_up_common+0x2a0/0x4e0 kernel/sched/wait.c:108 __wake_up_common_lock kernel/sched/wait.c:138 [inline] __wake_up+0x112/0x1c0 kernel/sched/wait.c:157 tty_port_default_wakeup+0xa8/0x100 drivers/tty/tty_port.c:51 serial8250_tx_chars+0x60d/0x800 drivers/tty/serial/8250/8250_port.c:1828 serial8250_handle_irq+0x505/0x600 drivers/tty/serial/8250/8250_port.c:1924 serial8250_default_handle_irq+0xc8/0x1e0 drivers/tty/serial/8250/8250_port.c:1941 serial8250_interrupt+0xa1/0x1e0 drivers/tty/serial/8250/8250_core.c:127 __handle_irq_event_percpu+0x292/0xa70 kernel/irq/handle.c:156 handle_irq_event_percpu kernel/irq/handle.c:196 [inline] handle_irq_event+0xff/0x2b0 kernel/irq/handle.c:213 handle_edge_irq+0x245/0xbf0 kernel/irq/chip.c:822 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq arch/x86/kernel/irq.c:231 [inline] __common_interrupt+0xd7/0x1f0 arch/x86/kernel/irq.c:250 common_interrupt+0x9f/0xc0 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:629 release_pages+0x1/0x1f40 mm/swap.c:887 __pagevec_lru_add+0x1584/0x18d0 mm/swap.c:1056 lru_add_drain_cpu+0xfd/0x700 mm/swap.c:597 lru_add_drain+0x79/0x130 mm/swap.c:701 exit_mmap+0x38f/0x670 mm/mmap.c:3181 __mmput+0x112/0x3b0 kernel/fork.c:1126 exec_mmap+0x543/0x630 fs/exec.c:1037 begin_new_exec+0x75d/0x1030 fs/exec.c:1295 load_elf_binary+0x945/0x2750 fs/binfmt_elf.c:1001 search_binary_handler fs/exec.c:1738 [inline] exec_binprm fs/exec.c:1779 [inline] bprm_execve+0x8fd/0x17c0 fs/exec.c:1848 do_execveat_common+0x583/0x720 fs/exec.c:1953 do_execve fs/exec.c:2023 [inline] __do_sys_execve fs/exec.c:2099 [inline] __se_sys_execve fs/exec.c:2094 [inline] __x64_sys_execve+0x8e/0xa0 fs/exec.c:2094 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 -> #2 (&tty->write_wait){-.-.}-{2:2}: lock_acquire+0x1db/0x4f0 kernel/locking/lockdep.c:5623 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 __wake_up_common_lock kernel/sched/wait.c:137 [inline] __wake_up+0xf5/0x1c0 kernel/sched/wait.c:157 tty_port_default_wakeup+0xa8/0x100 drivers/tty/tty_port.c:51 serial8250_tx_chars+0x60d/0x800 drivers/tty/serial/8250/8250_port.c:1828 serial8250_handle_irq+0x505/0x600 drivers/tty/serial/8250/8250_port.c:1924 serial8250_default_handle_irq+0xc8/0x1e0 drivers/tty/serial/8250/8250_port.c:1941 serial8250_interrupt+0xa1/0x1e0 drivers/tty/serial/8250/8250_core.c:127 __handle_irq_event_percpu+0x292/0xa70 kernel/irq/handle.c:156 handle_irq_event_percpu kernel/irq/handle.c:196 [inline] handle_irq_event+0xff/0x2b0 kernel/irq/handle.c:213 handle_edge_irq+0x245/0xbf0 kernel/irq/chip.c:822 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq arch/x86/kernel/irq.c:231 [inline] __common_interrupt+0xd7/0x1f0 arch/x86/kernel/irq.c:250 common_interrupt+0x9f/0xc0 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:629 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline] _raw_spin_unlock_irqrestore+0xd4/0x130 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:418 [inline] uart_write+0x6af/0x930 drivers/tty/serial/serial_core.c:590 process_output_block drivers/tty/n_tty.c:592 [inline] n_tty_write+0xd7e/0x1280 drivers/tty/n_tty.c:2339 do_tty_write drivers/tty/tty_io.c:1038 [inline] file_tty_write+0x561/0x920 drivers/tty/tty_io.c:1110 call_write_iter include/linux/fs.h:2172 [inline] new_sync_write fs/read_write.c:507 [inline] vfs_write+0xacf/0xe50 fs/read_write.c:594 ksys_write+0x1a2/0x2c0 fs/read_write.c:647 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 -> #1 (&port_lock_key){-.-.}-{2:2}: lock_acquire+0x1db/0x4f0 kernel/locking/lockdep.c:5623 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 serial8250_console_write+0x19d/0x1180 drivers/tty/serial/8250/8250_port.c:3354 console_unlock+0xced/0x12b0 kernel/printk/printk.c:2744 vprintk_emit+0xbf/0x150 kernel/printk/printk.c:2274 _printk+0xd1/0x120 kernel/printk/printk.c:2299 register_console+0x65a/0x940 kernel/printk/printk.c:3107 univ8250_console_init+0x41/0x50 drivers/tty/serial/8250/8250_core.c:690 console_init+0x18c/0x660 kernel/printk/printk.c:3207 start_kernel+0x301/0x540 init/main.c:1076 secondary_startup_64_no_verify+0xb1/0xbb -> #0 (console_owner){-...}-{0:0}: check_prev_add kernel/locking/lockdep.c:3053 [inline] check_prevs_add kernel/locking/lockdep.c:3172 [inline] validate_chain+0x1649/0x5930 kernel/locking/lockdep.c:3788 __lock_acquire+0x1295/0x1ff0 kernel/locking/lockdep.c:5012 lock_acquire+0x1db/0x4f0 kernel/locking/lockdep.c:5623 console_lock_spinning_enable+0x51/0x60 kernel/printk/printk.c:1805 console_unlock+0xa47/0x12b0 kernel/printk/printk.c:2741 vprintk_emit+0xbf/0x150 kernel/printk/printk.c:2274 _printk+0xd1/0x120 kernel/printk/printk.c:2299 report_bug+0x1e5/0x2e0 lib/bug.c:195 handle_bug+0x3d/0x70 arch/x86/kernel/traps.c:239 exc_invalid_op+0x16/0x40 arch/x86/kernel/traps.c:259 asm_exc_invalid_op+0x16/0x20 arch/x86/include/asm/idtentry.h:566 copy_from_user_nofault+0x15c/0x1c0 bpf_probe_read_user_common kernel/trace/bpf_trace.c:157 [inline] ____bpf_probe_read_compat kernel/trace/bpf_trace.c:281 [inline] bpf_probe_read_compat+0xe4/0x180 kernel/trace/bpf_trace.c:277 bpf_prog_c4f137fb4cb68b20+0x38/0xe0c bpf_dispatcher_nop_func include/linux/bpf.h:790 [inline] __bpf_prog_run include/linux/filter.h:628 [inline] bpf_prog_run include/linux/filter.h:635 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:1880 [inline] bpf_trace_run3+0x1d1/0x380 kernel/trace/bpf_trace.c:1918 trace_timer_start include/trace/events/timer.h:52 [inline] enqueue_timer+0x3ae/0x540 kernel/time/timer.c:586 internal_add_timer kernel/time/timer.c:611 [inline] add_timer_on+0x3e4/0x580 kernel/time/timer.c:1199 handle_irq_event_percpu kernel/irq/handle.c:198 [inline] handle_irq_event+0x124/0x2b0 kernel/irq/handle.c:213 handle_edge_irq+0x245/0xbf0 kernel/irq/chip.c:822 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq arch/x86/kernel/irq.c:231 [inline] __common_interrupt+0xd7/0x1f0 arch/x86/kernel/irq.c:250 common_interrupt+0x9f/0xc0 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:629 tick_nohz_idle_enter+0x22c/0x2f0 kernel/time/tick-sched.c:1156 do_idle+0xa7/0x670 kernel/sched/idle.c:280 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:403 start_secondary+0x371/0x500 arch/x86/kernel/smpboot.c:281 secondary_startup_64_no_verify+0xb1/0xbb other info that might help us debug this: Chain exists of: console_owner --> &rq->__lock --> &base->lock Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&base->lock); lock(&rq->__lock); lock(&base->lock); lock(console_owner); *** DEADLOCK *** 3 locks held by swapper/1/0: #0: ffff8880b9b28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 kernel/time/timer.c:946 #1: ffffffff8c91fae0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:311 #2: ffffffff8c7fc3a0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa6/0x150 kernel/printk/printk.c:2273 stack backtrace: CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.158-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2d0 lib/dump_stack.c:106 check_noncircular+0x2f8/0x3b0 kernel/locking/lockdep.c:2133 check_prev_add kernel/locking/lockdep.c:3053 [inline] check_prevs_add kernel/locking/lockdep.c:3172 [inline] validate_chain+0x1649/0x5930 kernel/locking/lockdep.c:3788 __lock_acquire+0x1295/0x1ff0 kernel/locking/lockdep.c:5012 lock_acquire+0x1db/0x4f0 kernel/locking/lockdep.c:5623 console_lock_spinning_enable+0x51/0x60 kernel/printk/printk.c:1805 console_unlock+0xa47/0x12b0 kernel/printk/printk.c:2741 vprintk_emit+0xbf/0x150 kernel/printk/printk.c:2274 _printk+0xd1/0x120 kernel/printk/printk.c:2299 report_bug+0x1e5/0x2e0 lib/bug.c:195 handle_bug+0x3d/0x70 arch/x86/kernel/traps.c:239 exc_invalid_op+0x16/0x40 arch/x86/kernel/traps.c:259 asm_exc_invalid_op+0x16/0x20 arch/x86/include/asm/idtentry.h:566 RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 mm/maccess.c:226 Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 7b c4 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 64 c4 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff RSP: 0018:ffffc90000dd0bb0 EFLAGS: 00010046 RAX: ffffffff81aa985c RBX: 0000000000000000 RCX: ffff888011e98000 RDX: 0000000080010003 RSI: 0000000000000000 RDI: 0000000000000000 RBP: dffffc0000000000 R08: ffffffff81aa976d R09: ffffed10023d3001 R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000035f31123 R13: 0000000000000008 R14: 0000000035f31123 R15: ffffc90000dd0c28 bpf_probe_read_user_common kernel/trace/bpf_trace.c:157 [inline] ____bpf_probe_read_compat kernel/trace/bpf_trace.c:281 [inline] bpf_probe_read_compat+0xe4/0x180 kernel/trace/bpf_trace.c:277 bpf_prog_c4f137fb4cb68b20+0x38/0xe0c bpf_dispatcher_nop_func include/linux/bpf.h:790 [inline] __bpf_prog_run include/linux/filter.h:628 [inline] bpf_prog_run include/linux/filter.h:635 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:1880 [inline] bpf_trace_run3+0x1d1/0x380 kernel/trace/bpf_trace.c:1918 trace_timer_start include/trace/events/timer.h:52 [inline] enqueue_timer+0x3ae/0x540 kernel/time/timer.c:586 internal_add_timer kernel/time/timer.c:611 [inline] add_timer_on+0x3e4/0x580 kernel/time/timer.c:1199 handle_irq_event_percpu kernel/irq/handle.c:198 [inline] handle_irq_event+0x124/0x2b0 kernel/irq/handle.c:213 handle_edge_irq+0x245/0xbf0 kernel/irq/chip.c:822 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq arch/x86/kernel/irq.c:231 [inline] __common_interrupt+0xd7/0x1f0 arch/x86/kernel/irq.c:250 common_interrupt+0x9f/0xc0 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:629 RIP: 0010:tick_nohz_idle_enter+0x22c/0x2f0 kernel/time/tick-sched.c:1156 Code: 00 4d 89 3c 24 42 0f b6 04 2b 84 c0 0f 85 a2 00 00 00 41 80 0e 04 e8 53 c9 e6 ff e8 ce cc 13 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> 8b 44 24 18 49 c7 44 05 00 00 00 00 00 65 48 8b 04 25 28 00 00 RSP: 0018:ffffc90000d67c80 EFLAGS: 00000282 RAX: 113a1a0d1aa0cc00 RBX: 1ffff11017365582 RCX: ffffffff913eef03 RDX: dffffc0000000000 RSI: ffffffff8a8b2980 RDI: ffffffff8ad8f600 RBP: ffffc90000d67d30 R08: ffffffff8186dcf0 R09: ffffffff8f5fa048 R10: ffffffff8f5fa058 R11: ffffffff8f5fa050 R12: ffff8880b9b2ac40 R13: dffffc0000000000 R14: ffff8880b9b2ac14 R15: 0000000be3712095 do_idle+0xa7/0x670 kernel/sched/idle.c:280 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:403 start_secondary+0x371/0x500 arch/x86/kernel/smpboot.c:281 secondary_startup_64_no_verify+0xb1/0xbb WARNING: CPU: 1 PID: 0 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.158-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 mm/maccess.c:226 Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 7b c4 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 64 c4 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff RSP: 0018:ffffc90000dd0bb0 EFLAGS: 00010046 RAX: ffffffff81aa985c RBX: 0000000000000000 RCX: ffff888011e98000 RDX: 0000000080010003 RSI: 0000000000000000 RDI: 0000000000000000 RBP: dffffc0000000000 R08: ffffffff81aa976d R09: ffffed10023d3001 R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000035f31123 R13: 0000000000000008 R14: 0000000035f31123 R15: ffffc90000dd0c28 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555556feeda8 CR3: 0000000072b01000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: bpf_probe_read_user_common kernel/trace/bpf_trace.c:157 [inline] ____bpf_probe_read_compat kernel/trace/bpf_trace.c:281 [inline] bpf_probe_read_compat+0xe4/0x180 kernel/trace/bpf_trace.c:277 bpf_prog_c4f137fb4cb68b20+0x38/0xe0c bpf_dispatcher_nop_func include/linux/bpf.h:790 [inline] __bpf_prog_run include/linux/filter.h:628 [inline] bpf_prog_run include/linux/filter.h:635 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:1880 [inline] bpf_trace_run3+0x1d1/0x380 kernel/trace/bpf_trace.c:1918 trace_timer_start include/trace/events/timer.h:52 [inline] enqueue_timer+0x3ae/0x540 kernel/time/timer.c:586 internal_add_timer kernel/time/timer.c:611 [inline] add_timer_on+0x3e4/0x580 kernel/time/timer.c:1199 handle_irq_event_percpu kernel/irq/handle.c:198 [inline] handle_irq_event+0x124/0x2b0 kernel/irq/handle.c:213 handle_edge_irq+0x245/0xbf0 kernel/irq/chip.c:822 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq arch/x86/kernel/irq.c:231 [inline] __common_interrupt+0xd7/0x1f0 arch/x86/kernel/irq.c:250 common_interrupt+0x9f/0xc0 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:629 RIP: 0010:tick_nohz_idle_enter+0x22c/0x2f0 kernel/time/tick-sched.c:1156 Code: 00 4d 89 3c 24 42 0f b6 04 2b 84 c0 0f 85 a2 00 00 00 41 80 0e 04 e8 53 c9 e6 ff e8 ce cc 13 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> 8b 44 24 18 49 c7 44 05 00 00 00 00 00 65 48 8b 04 25 28 00 00 RSP: 0018:ffffc90000d67c80 EFLAGS: 00000282 RAX: 113a1a0d1aa0cc00 RBX: 1ffff11017365582 RCX: ffffffff913eef03 RDX: dffffc0000000000 RSI: ffffffff8a8b2980 RDI: ffffffff8ad8f600 RBP: ffffc90000d67d30 R08: ffffffff8186dcf0 R09: ffffffff8f5fa048 R10: ffffffff8f5fa058 R11: ffffffff8f5fa050 R12: ffff8880b9b2ac40 R13: dffffc0000000000 R14: ffff8880b9b2ac14 R15: 0000000be3712095 do_idle+0xa7/0x670 kernel/sched/idle.c:280 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:403 start_secondary+0x371/0x500 arch/x86/kernel/smpboot.c:281 secondary_startup_64_no_verify+0xb1/0xbb ---------------- Code disassembly (best guess): 0: 00 4d 89 add %cl,-0x77(%rbp) 3: 3c 24 cmp $0x24,%al 5: 42 0f b6 04 2b movzbl (%rbx,%r13,1),%eax a: 84 c0 test %al,%al c: 0f 85 a2 00 00 00 jne 0xb4 12: 41 80 0e 04 orb $0x4,(%r14) 16: e8 53 c9 e6 ff call 0xffe6c96e 1b: e8 ce cc 13 00 call 0x13ccee 20: fb sti 21: 48 c7 44 24 20 0e 36 movq $0x45e0360e,0x20(%rsp) 28: e0 45 * 2a: 48 8b 44 24 18 mov 0x18(%rsp),%rax <-- trapping instruction 2f: 49 c7 44 05 00 00 00 movq $0x0,0x0(%r13,%rax,1) 36: 00 00 38: 65 gs 39: 48 rex.W 3a: 8b .byte 0x8b 3b: 04 25 add $0x25,%al 3d: 28 00 sub %al,(%rax)